Application Security Engineer

Cybersecurity Jobs; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Sign-on payments

RSUs

Health insurance

Life Insurance

EAP

Mental Health Support

Medical Advice Line

Flexible Spending Accounts

Adoption and Surrogacy Reimbursement

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Security in Seattle, WA is seeking an Application Security Engineer for an onsite role. You will strengthen the security posture of services, applications, and websites through reviews, remediation, and automation.

You will work with engineers and security partners to evaluate application and mobile security, respond to threats, and help improve security processes with measurable outcomes, including training, documentation, and cross-team enablement.

Qualifications

• 3+ years of non-internship work across at least 5 security domains.
• Bachelor’s degree in computer science or equivalent.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Experience with scripting, programming, and security code reviewing.
• Experience troubleshooting systems issues, logs, or automating basic tasks using command line tools.
• Knowledge of common software security vulnerabilities (e.g. OWASP top 10) and remediation techniques.

Responsibilities

• Conduct application security reviews, including architecture reviews, threat modeling, code reviews, and security testing.
• Perform mobile security reviews.
• Support projects and research work as needed.
• Deliver security training and outreach to internal development teams.
• Provide security guidance and documentation.
• Build security workflow automation to improve security activities.
• Deliver security metrics and drive process improvements.
• Assist with recruiting activities and related administrative work.

Skills

Application security

Code reviews

Threat modeling

Security testing

Scripting

CLI automation

OWASP top 10

Education

Bachelor’s degree in computer science or equivalent

Tools

AWS

Python

Java

C++

Job description

Amazon Security is hiring an Application Security Engineer based in Seattle, WA for an onsite role. The position focuses on strengthening the security posture of services, applications, and websites through rigorous reviews, practical remediation, and automation that helps teams scale secure development.

Working with engineers and security partners, you will evaluate application and mobile security, respond to evolving threat scenarios, and help improve security processes through measurable outcomes. This role also includes cross-team enablement such as training, documentation, and guidance for internal development teams.

What you’ll do

• Conduct application security reviews, including architecture reviews, threat modeling, code reviews, and security testing
• Perform mobile security reviews
• Support projects and research work as needed
• Deliver security training and outreach to internal development teams
• Provide security guidance and documentation
• Build security workflow automation to improve how security activities run
• Deliver security metrics and drive process improvements
• Assist with recruiting activities and related administrative work

Minimum qualifications

• 3+ years of non-internship work across at least 5 of these security domains: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, or identity and access controls experience
• Bachelor’s degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience with scripting, programming, and security code reviewing in a common programming language (non-internship)
• Experience troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
• Knowledge of common software security vulnerabilities (for example, OWASP top 10) and remediation techniques

Preferred qualifications

• 4+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services
• Experience with scripting, programming, or security code review using a common language such as Python, Java, or C++
• Experience performing security activities across one or more phases of the SDLC, such as security design review, threat modeling, secure code review, and security testing

Technologies

• HTTP, DNS, TCP/IP
• OWASP top 10
• Python, Java, C++
• AWS

Compensation and benefits

Salary: USD 159,300 - 202,400 per year.

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription)
• Basic Life & AD&D insurance (option for Supplemental life plans)
• EAP
• Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Team and culture

• Amazon Security values diverse experiences.
• Candidates are encouraged to apply even if they do not meet all listed qualifications and skills.
• The organization emphasizes learning and curiosity, supported by ongoing DEI events and learning experiences.
• Addressing tough security challenges includes seeking out and celebrating a diversity of ideas, perspectives, and voices.
• Knowledge-sharing, training, and career-advancing resources are available.
• Work-life harmony is supported through flexible work hours and arrangements.