AWS Application Security Engineer (DevSecOps)

System One; Knoxville (TN); Hybrid; USD 120,000 - 170,000; Full time

Job summary

System One seeks an AWS Application Security Analyst to fortify security across software development lifecycle in a large financial services environment. You will perform manual and automated reviews, threat modeling, and remediation in AWS/cloud contexts while partnering with developers and security teams.

The role requires hands-on use of SAST/DAST/SCA, CI/CD integration, and strong communication to stakeholders. Hybrid work is available at client sites in multiple states including TN.

Qualifications

• 5+ years of application security and secure software development practices.
• Experience with SAST, DAST, and SCA tools to identify vulnerabilities.
• Experience conducting manual code reviews, threat modeling, and risk assessments.
• Working knowledge of AWS security and cloud deployments.
• Experience with DevSecOps practices and CI/CD pipelines.

Responsibilities

• Perform manual and automated app and code security reviews to identify vulnerabilities.
• Conduct threat modeling and security risk assessments for new and existing applications.
• Collaborate with development teams to remediate security findings.
• Utilize SAST, DAST, and SCA tools in security testing.
• Support integration of security testing into CI/CD pipelines.
• Evaluate security in AWS and containerized environments.
• Apply secure coding practices and encryption knowledge.
• Help advance DevSecOps across the SDLC.
• Create FAQs and reusable security guidance for teams.

Skills

Cloud security

Threat modeling

SAST/DAST/SCA

DevSecOps

CI/CD security

AWS security

Programming languages

Communication

Education

Bachelor's degree in CS/IS or related

Tools

GitHub

Jenkins

Job description

System One seeks an AWS Application Security Analyst to fortify security across software development lifecycle in a large financial services environment. You will perform manual and automated reviews, threat modeling, and remediation in AWS/cloud contexts while partnering with developers and security teams.

The role requires hands-on use of SAST/DAST/SCA, CI/CD integration, and strong communication to stakeholders. Hybrid work is available at client sites in multiple states including TN.