Senior Application Security Engineer – Cloud & Apps

Amazon; Arlington (VA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Sign-on payments

Restricted stock units (RSUs)

Health insurance

401(k) matching

Paid time off

Parental leave

Flexible Spending Accounts

Job summary

Amazon.com Services LLC is seeking a Security Engineer to protect our corporate services, systems, and data across multiple business units. You will collaborate with development teams to inspect code, build secure frameworks, and design secure services, influencing security strategy and mentoring peers.

The role combines deep technical security expertise with leadership by influence, communicating risks to technical and non-technical audiences and guiding partners toward secure solutions that

Qualifications

• 5+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• 5+ years of work in identifying security issues and risks, and developing mitigation plans.
• 5+ years of (non-internship) scripting, programming, and security code review in common programming languages.
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go.
• Experience as a mentor, tech lead or leading an engineering team.

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of web applications hosted on cloud
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Adversarial security analysis using the latest tools to augment manual effort
• Provide Security training and outreach for internal development teams
• Provide Security architecture and design guidance to application development teams
• Independently solve systemic, complex security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, strategy and choices by using data to improve security outcomes
• Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications

Skills

Threat modeling

Security code review

Security automation

Adversarial security analysis

Mentor / tech lead

Scripting languages

Programming languages

Job description

Amazon.com Services LLC is seeking a Security Engineer to protect our corporate services, systems, and data across multiple business units. You will collaborate with development teams to inspect code, build secure frameworks, and design secure services, influencing security strategy and mentoring peers.

The role combines deep technical security expertise with leadership by influence, communicating risks to technical and non-technical audiences and guiding partners toward secure solutions that