AWS App Security Engineer - Threat Modeling & Secure Coding

Amazon Web Services (AWS); Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

RSUs

Job summary

Amazon.com Services LLC in Seattle seeks an Application Security Engineer to validate that services, applications, and websites meet the highest security standards. You will analyze security across systems, address issues, and build security automation while collaborating with cross-functional teams.

The role expects strengths across multiple security domains, mentoring junior engineers, and contributing to secure software development practices.

Qualifications

• 3+ years of non-internship work across at least 5 security domains (application security, reviews, incident response, infrastructure, penetration testing, mobile security, cloud security, IAM, or identity controls)
• Bachelor's degree in CS or equivalent
• Knowledge of networking protocols (HTTP, DNS, TCP/IP)
• Scripting, programming, and security code review in a common language
• Experience troubleshooting systems issues, logs, and automation via CLI
• Knowledge of OWASP Top 10 and remediation techniques

Responsibilities

• Conduct application security reviews including architecture reviews, threat modeling, code reviews, and security testing
• Perform mobile security reviews
• Execute security projects and research as needed
• Provide security training and outreach to internal teams
• Create security guidance and documentation
• Automate security workflows and metrics
• Assist with recruiting activities and administrative work

Skills

Application security

Threat modeling

Security code reviews

Incident response

Security infrastructure

Penetration testing

Python

Java

C++

Education

Bachelor's degree in computer science or equivalent

Tools

Security testing tools

Job description

Amazon.com Services LLC in Seattle seeks an Application Security Engineer to validate that services, applications, and websites meet the highest security standards. You will analyze security across systems, address issues, and build security automation while collaborating with cross-functional teams.

The role expects strengths across multiple security domains, mentoring junior engineers, and contributing to secure software development practices.