Application Security Engineer

Cybersecurity Jobs; Arlington (VA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Sign-on payments

Restricted stock units

Job summary

Amazon.com Services LLC is hiring an Application Security Engineer to support AWS services, applications, and websites in meeting high security standards. In this Arlington, VA onsite role, you will help validate security posture through reviews, testing, and engineering-focused automation, while staying responsive to emerging threat scenarios.

As part of the application security function, you will analyze security risks across software and web properties, identify weaknesses, and drive

Qualifications

• Bachelor's degree in computer science (or equivalent).
• Experience with Python, Java, C++, or other OO languages.
• Knowledge of HTTP, DNS, and TCP/IP networking protocols.
• Experience with security frameworks, code reviews, incident response, cloud security, or threat modeling.

Responsibilities

• Conduct application security reviews.
• Perform penetration testing.
• Support projects and research work as needed.
• Provide security training and outreach to internal development teams.
• Create security guidance documentation.
• Develop security tools.
• Deliver security metrics and drive improvements based on findings.
• Assist with recruiting activities and administrative work.

Skills

Networking protocols

Python

Java

C++

.NET

Security frameworks

Security code reviews

Penetration testing

Threat modeling

Cryptography

Education

Bachelor's degree in computer science

Job description

Amazon.com Services LLC is hiring an Application Security Engineer to support AWS services, applications, and websites in meeting high security standards. In this Arlington, VA onsite role, you will help validate security posture through reviews, testing, and engineering-focused automation, while staying responsive to emerging threat scenarios.

As part of the application security function, you will analyze security risks across software and web properties, identify weaknesses, and drive improvements through practical tooling and security guidance for development teams.

Responsibilities

• Conduct application security reviews
• Perform penetration testing
• Support projects and research work as needed
• Provide security training and outreach to internal development teams
• Create security guidance documentation
• Develop security tools
• Deliver security metrics and drive improvements based on findings
• Assist with recruiting activities and administrative work

Requirements

• Bachelor's degree in computer science (or equivalent)
• Knowledge of networking protocols including HTTP, DNS, and TCP/IP
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++, or another object-oriented language
• Experience with any combination of: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more domains including: web application development, penetration testing, mobile security, cryptography, public key infrastructure, forensic security, IP security, SSL/TLS, computer viruses and malware, network security, trusted security, trusted execution, threat intelligence, or IoT security implications, or authentication

Technologies

• HTTP, DNS, TCP/IP
• Python, Ruby, Go, Swift, Java, .Net, C++
• SSL/TLS, public key infrastructure, IP security
• Cryptography, threat intelligence

Benefits

• Health insurance including medical, dental, vision, prescription, Basic Life & AD&D, and options for Supplemental life plans, plus EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

Preferred Qualifications

• Experience with AWS products and services
• Experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
• Experience with programming languages such as Python, Java, C++
• Knowledge of security technology and concepts including Authentication, Authorization, Single sign-on, Cryptography, etc.
• Experience working directly with security and engineering teams
• Knowledge of network and web related protocols such as TCP/IP, UDP, IPSEC, HTTP, or equivalent
• Experience with web services and related technologies

Location: Arlington, VA (onsite). Salary: USD 159,300 - 202,400 per year.