AWS Application Security Engineer – DevSecOps & SDLC

System One; Columbia (SC); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health & welfare benefits

401(k) plan

Job summary

System One is seeking an experienced AWS Application Security Analyst to support application security initiatives within a large financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks throughout the SDLC.

This role requires hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, DevSecOps, CI/CD security, AWS security, and container security, and the ability to

Qualifications

• 5+ years of application security experience.
• Hands-on with SAST, DAST, and SCA tools.
• Manual code reviews and security assessments.
• Threat modeling and security risk assessments.
• AWS security in cloud environments.
• DevSecOps with CI/CD pipelines.
• Experience with GitHub/Jenkins or similar CI/CD platforms.
• Container security knowledge.
• Programming or code-review in Java, Python, JavaScript, or C#.
• Strong knowledge of network protocols, encryption, and authentication.

Responsibilities

• Perform manual and automated application and source-code security reviews to identify vulnerabilities and security risks.
• Conduct threat modeling and application security risk assessments for new and existing applications.
• Work with development teams to determine remediation approaches for security findings.
• Utilize SAST, DAST, and SCA tools for application security testing.
• Integrate application security controls and automated testing into CI/CD pipelines.
• Evaluate security risks across AWS cloud and containerized environments.
• Apply secure coding practices and knowledge of networks, encryption, and auth.
• Collaborate with DevOps, cloud, and cybersecurity teams to strengthen DevSecOps in the SDLC.
• Develop security guidance, FAQs, standards, and reusable best practices for development teams.
• Communicate vulnerabilities and remediation recommendations clearly to technical stakeholders.

Skills

App security exp

SAST

DAST

SCA

Threat modeling

DevSecOps

CI/CD security

AWS security

Container security

Secure coding

Communication

Education

Bachelor's degree

Tools

GitHub

Jenkins

CI/CD tools

Job description

System One is seeking an experienced AWS Application Security Analyst to support application security initiatives within a large financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks throughout the SDLC.

This role requires hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, DevSecOps, CI/CD security, AWS security, and container security, and the ability to