Cloud Application Security Engineer — Threat Modeling & Secure Design

Amazon; Seattle (WA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amazon.com Services LLC is seeking an Application Security Engineer to validate that our services, applications, and websites uphold the highest security standards. You will analyze security, address issues, build automation, and respond to evolving threats.

You will collaborate with engineering teams to design secure architectures, perform threat modeling, review code for security issues, and develop tooling to scale security practices while mentoring others and contributing to security

Qualifications

• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
• Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure.
• Experience with web protocols, common security attacks, and remediation (non-internship).
• Experience solving basic problems by writing code or scripts with some assistance.

Responsibilities

• Application security reviews.
• Mobile security reviews.
• Secure architecture design.
• Threat modeling.
• Projects and research work as needed.

Skills

Penetration testing

Security code reviews

Incident response

Security infrastructure

Coding/scripting

Education

Bachelor's degree in Engineering, Computer Science, or a related field

Job description

Amazon.com Services LLC is seeking an Application Security Engineer to validate that our services, applications, and websites uphold the highest security standards. You will analyze security, address issues, build automation, and respond to evolving threats.

You will collaborate with engineering teams to design secure architectures, perform threat modeling, review code for security issues, and develop tooling to scale security practices while mentoring others and contributing to security