AWS Security Engineer: Threat Modeling & Secure Design

Cybersecurity Jobs; Arlington (VA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Sign-on payments

RSUs

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon.com Services LLC is hiring a Security Engineer to evaluate AWS service designs, run security assessments, and help teams ship with strong application security.

In this role you will perform security-focused design reviews, conduct threat modeling, coordinate penetration testing, and guide teams on secure coding, authentication, and data protection. The position is based in Arlington, VA on-site with competitive benefits.

Qualifications

• Bachelor’s degree in Engineering, CS, or related field required.
• 2+ years of web security experience and remediation.
• Knowledge of system security vulnerabilities and remediation techniques.
• Experience with writing code or scripts to solve problems.
• Experience with AWS services or other cloud offerings.

Responsibilities

• Perform security-focused design reviews for new and existing services.
• Run threat modeling exercises to identify attack vectors.
• Coordinate penetration testing to validate controls.
• Document findings and provide remediation guidance.
• Verify remediation actions are implemented.
• Advise on secure coding practices, authentication, cryptography, and data protection.
• Identify high-severity issues and escalate appropriately.
• Maintain documentation of review outcomes and risk assessments.
• Use automated tools to support reviews and improve efficiency.

Skills

Web security fundamentals

Threat modeling

Penetration testing

Scripting / coding

Cloud security

Education

Bachelor’s degree in Engineering or CS

Tools

AWS

Job description

Amazon.com Services LLC is hiring a Security Engineer to evaluate AWS service designs, run security assessments, and help teams ship with strong application security.

In this role you will perform security-focused design reviews, conduct threat modeling, coordinate penetration testing, and guide teams on secure coding, authentication, and data protection. The position is based in Arlington, VA on-site with competitive benefits.