AppSec Security Engineer: Threat Modeling & Automation

Amazon; Herndon (VA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

RSUs

Flexible Spending Accounts

Job summary

Amazon is seeking an Application Security Engineer for the AWS Security team in Herndon, VA to validate that services and applications are built to the highest security standards. You will analyze the security of applications and services, discover and address issues, build security automation, and react rapidly to new threat scenarios.

You will collaborate with engineering teams to embed secure design from the start, mentor junior engineers, and help grow security capabilities across Amazon's

Qualifications

• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploit development.
• Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure.
• Experience with web protocols and common security attacks and remediation.
• Experience solving basic problems by writing code or scripts with some assistance.

Responsibilities

• Application security reviews
• Mobile security reviews
• Secure architecture design
• Threat modeling
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements

Skills

Knowledge of security vulnerabilities

Application security architecture

Web protocols & attacks

Coding/scripting ability

Education

Bachelor's degree in Engineering or CS

Job description

Amazon is seeking an Application Security Engineer for the AWS Security team in Herndon, VA to validate that services and applications are built to the highest security standards. You will analyze the security of applications and services, discover and address issues, build security automation, and react rapidly to new threat scenarios.

You will collaborate with engineering teams to embed secure design from the start, mentor junior engineers, and help grow security capabilities across Amazon's