Application Security Engineer: Threat Modeling & Automation

Amazon; Arlington (VA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

Paid time off

Parental leave

Job summary

Amazon's AWS Security team is seeking an Application Security Engineer to validate security across applications, services, and websites. You will analyze security, identify issues, build automation, and mentor peers to raise the overall security posture of AWS.

The role emphasizes collaboration, rigorous threat modeling, and ongoing learning. A strong foundation in scripting and security review is required, with ample opportunities to influence security across teams in Arlington, VA.

Qualifications

• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Knowledge of industry-based security vulnerabilities and remediation techniques
• 2+ years of threat modeling experience of enterprise scale applications.

Responsibilities

• Application security reviews
• Deeply Threat Modeling AWS services
• Continuous improvement and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

Skills

Scripting

Threat modeling

Security review

Troubleshooting

Education

Bachelor's degree in STEM

Job description

Amazon's AWS Security team is seeking an Application Security Engineer to validate security across applications, services, and websites. You will analyze security, identify issues, build automation, and mentor peers to raise the overall security posture of AWS.

The role emphasizes collaboration, rigorous threat modeling, and ongoing learning. A strong foundation in scripting and security review is required, with ample opportunities to influence security across teams in Arlington, VA.