AppSec Security Engineer: Threat Modeling & Secure Coding

Socket.dev; Seattle (WA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

RSUs (restricted stock units)

401(k) matching

Paid time off

Job summary

Amazon Security is seeking a Security Engineer to collaborate with software teams across the Stores organization, helping to protect customers as we build world-class services. You will model threats, review code for security, and develop tools to automate security tasks, while guiding architecture decisions and training internal teams.

The role emphasizes leadership by influence, clear communication of risks, and prioritizing security across diverse projects in a fast-paced environment.

Qualifications

• Bachelor's degree in Engineering, CS or related field.
• Knowledge of system security vulnerabilities and remediation techniques.
• Experience with web protocols and common attacks, and remediation.
• Experience solving basic problems by writing code or scripts with some assistance.
• Experience in security architecture, code reviews, testing, incident response, or security infrastructure.

Responsibilities

• Create and maintain threat models for a wide variety of software projects.
• Manual and automated secure code review in Java, Python and JavaScript.
• Develop security automation tools.
• Adversarial security analysis using modern tools to augment manual effort.
• Security training and outreach for internal development teams.
• Security architecture and design guidance.
• Independently solve security problems requiring novel methods.
• Influence team and partner processes to improve outcomes.

Skills

Penetration testing

Code review

Security architecture

Incident response

Security tooling

Education

Bachelor's degree in Engineering, Computer Science, or a related field

Tools

AWS

Job description

Amazon Security is seeking a Security Engineer to collaborate with software teams across the Stores organization, helping to protect customers as we build world-class services. You will model threats, review code for security, and develop tools to automate security tasks, while guiding architecture decisions and training internal teams.

The role emphasizes leadership by influence, clear communication of risks, and prioritizing security across diverse projects in a fast-paced environment.