AppSec Security Engineer – Threat Modeling & Secure Coding

Amazon; Seattle (WA); On-site; USD 136,000 - 184,000; Full time

Job summary

Amazon is expanding its security program in Seattle, seeking a Security Engineer to collaborate with software teams and harden cloud, retail, and device services. You will inspect code for security issues, build frameworks for faster secure development, and refine service designs with developers.

The role requires expertise across security domains, ability to communicate risks clearly, and leadership by influence. Amazon emphasizes work‑life balance and continuous growth within its security org.

Qualifications

• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance
• Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript
• Development of security automation tools
• Adversarial security analysis using modern tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes

Skills

Security vulnerabilities

Penetration testing

Web protocols

Security incident response

Secure code reviews

Education

Bachelor's degree in Engineering, Computer Science, or a related field

Job description

Amazon is expanding its security program in Seattle, seeking a Security Engineer to collaborate with software teams and harden cloud, retail, and device services. You will inspect code for security issues, build frameworks for faster secure development, and refine service designs with developers.

The role requires expertise across security domains, ability to communicate risks clearly, and leadership by influence. Amazon emphasizes work‑life balance and continuous growth within its security org.