Cloud Application Security Engineer — Flexible Hours

Amazon Web Services (AWS); Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com Services LLC in Seattle is seeking an Application Security Engineer to validate that AWS services and customer-facing apps meet high security standards. You will analyze applications, identify and address issues, and help build security automation across teams.

The role emphasizes mentoring, collaboration, and contributing to secure software development practices while advancing your expertise in threat modeling, secure coding, and security testing.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language.
• 2+ years of scripting, programming, and security code review in a non-internship role.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools.
• Bachelor's degree in a STEM field or 2+ years IT Security experience.
• Knowledge of HTTP, DNS and TCP/IP.
• Knowledge of security vulnerabilities and remediation techniques.

Responsibilities

• Application security reviews
• Penetration testing
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

Skills

Python

Ruby

Go

Swift

Java

.NET

C++

Education

Bachelor's degree in STEM

2+ years IT Security experience

Tools

Command line tools

Job description

Amazon.com Services LLC in Seattle is seeking an Application Security Engineer to validate that AWS services and customer-facing apps meet high security standards. You will analyze applications, identify and address issues, and help build security automation across teams.

The role emphasizes mentoring, collaboration, and contributing to secure software development practices while advancing your expertise in threat modeling, secure coding, and security testing.