Senior Application Security Engineer - Threat Modeling

Amazon; Herndon (VA); Vor Ort; USD 159.000 - 202.000; Vollzeit

Zusammenfassung

Amazon Development Center U.S., Inc. is seeking an Application Security Engineer to validate that AWS services, applications, and websites meet the highest security standards. You will analyze security, address issues, build automation, and mentor junior engineers within a collaborative team.

The role requires strong problem-solving, communication, and the ability to handle diverse tasks, with opportunities to grow security expertise across multiple domains.

Qualifikationen

• 2+ years of scripting, programming, and security code review in a non-internship role.
• 2+ years troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools.
• Bachelor's degree in a STEM field or 2+ years IT security experience.
• Knowledge of industry-based security vulnerabilities and remediation techniques.
• 2+ years of threat modeling, secure coding, identity management, and network security experience.
• 2+ years of threat modeling enterprise-scale applications.

Aufgaben

• Application security reviews.
• Threat modeling of AWS services.
• Continuous improvement and research work as needed.
• Security training and outreach to internal development teams.
• Security guidance documentation.
• Security tool development.
• Security metrics delivery and improvements.
• Assistance with recruiting activities and administrative work.

Kenntnisse

Scripting experience

Troubleshooting logs

Threat modeling

Security knowledge

Ausbildung

STEM degree or IT security exp

Tools

Python

Java

C++

Jobbeschreibung

Amazon Development Center U.S., Inc. is seeking an Application Security Engineer to validate that AWS services, applications, and websites meet the highest security standards. You will analyze security, address issues, build automation, and mentor junior engineers within a collaborative team.

The role requires strong problem-solving, communication, and the ability to handle diverse tasks, with opportunities to grow security expertise across multiple domains.