Cloud App Security Engineer II — Threat Modeling & Defense

Amazon Inc.; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs & stock-based compensation

401(k) matching

Paid time off

Job summary

Amazon AWS Security is seeking an Application Security Engineer to validate that services and applications meet top security standards. You will analyze security of apps, discover issues, build automation, and mentor junior engineers.

You will contribute across planning, security reviews, and threat modeling, with opportunities to lead security initiatives and drive improvements in tooling and processes.

Qualifications

• 2+ years of scripting, programming, and security code review (non-internship) experience.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor’s degree in STEM field, or 2+ years of IT Security experience
• Knowledge of HTTP, DNS and TCP/IP networking protocols
• Knowledge of industry-based security vulnerabilities and remediation techniques

Responsibilities

• Application security reviews
• Penetration testing
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

Skills

Scripting & automation

Troubleshooting

Security code review

Networking knowledge

Communication

Education

Bachelor’s degree in STEM

Tools

AWS services

Command line tooling

Job description

Amazon AWS Security is seeking an Application Security Engineer to validate that services and applications meet top security standards. You will analyze security of apps, discover issues, build automation, and mentor junior engineers.

You will contribute across planning, security reviews, and threat modeling, with opportunities to lead security initiatives and drive improvements in tooling and processes.