AWS App Security Engineer - SDLC & DevSecOps

System One; Birmingham (AL); Hybrid; USD 110,000 - 160,000; Full time

Job summary

System One is seeking an experienced AWS Application Security Analyst to support security initiatives within a large-scale financial services environment. This role collaborates with software development, cloud, DevOps, and cybersecurity teams across the SDLC to identify, assess, and remediate risks.

The ideal candidate has hands-on experience with SAST, DAST, SCA, threat modeling, secure code reviews, DevSecOps, CI/CD security integration, AWS security, and container security.

Qualifications

• 5+ years of application security experience.
• Hands-on with SAST, DAST, and SCA.
• Experience with threat modeling and risk assessments.
• AWS security experience.
• DevSecOps and CI/CD integration.

Responsibilities

• Perform manual and automated security reviews of applications and code.
• Conduct threat modeling and risk assessments for apps.
• Recommend remediation with development teams.
• Use SAST, DAST, and SCA for testing.
• Integrate security testing into CI/CD pipelines.
• Assess security in AWS and container environments.
• Promote DevSecOps practices across the SDLC.
• Create security guidance and reusable best practices.
• Communicate findings to technical stakeholders.

Skills

Application security

Threat modeling

DevSecOps

CI/CD security

AWS security

SAST/DAST/SCA

Container security

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

GitHub

Jenkins

Job description

System One is seeking an experienced AWS Application Security Analyst to support security initiatives within a large-scale financial services environment. This role collaborates with software development, cloud, DevOps, and cybersecurity teams across the SDLC to identify, assess, and remediate risks.

The ideal candidate has hands-on experience with SAST, DAST, SCA, threat modeling, secure code reviews, DevSecOps, CI/CD security integration, AWS security, and container security.