AWS Application Security Engineer (SDLC & DevSecOps)

System One; Columbia (SC); Hybrid; USD 110,000 - 150,000; Full time

Job summary

System One is seeking an experienced AWS Application Security Analyst to support security initiatives within a financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate risks across the SDLC.

The ideal candidate brings hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, and AWS/container security, with a focus on integrating security into CI/CD pipelines and DevSecOps practices.

Qualifications

• 5+ years of application security experience in a large org.

Responsibilities

• Perform manual and automated application and source-code security reviews.
• Conduct threat modeling and security risk assessments for new and existing applications.
• Collaborate with development teams to determine remediation approaches for security findings.
• Utilize SAST, DAST, and SCA tools for testing.
• Integrate security testing into CI/CD pipelines.
• Evaluate security risks across AWS cloud and containerized environments.
• Apply secure coding practices and knowledge of networks, encryption, authentication.
• Work with DevOps, cloud, and cybersecurity teams to strengthen DevSecOps.
• Develop security guidance and reusable best practices for development teams.
• Clearly communicate vulnerabilities and remediation recommendations to stakeholders.

Skills

SAST

DAST

SCA

Threat modeling

DevSecOps

CI/CD security

AWS security

Container security

Programming (Java/Python/JS/C#)

GitHub/Jenkins

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

GitHub

Jenkins

Job description

System One is seeking an experienced AWS Application Security Analyst to support security initiatives within a financial services environment. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate risks across the SDLC.

The ideal candidate brings hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, and AWS/container security, with a focus on integrating security into CI/CD pipelines and DevSecOps practices.