Senior AppSec Engineer — AI Platform & Supply Chain

Socket.dev; Jessup (MD); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Health insurance

RSUs

401(k) matching

Job summary

Amazon's Security team is seeking a Senior Application Security Engineer to lead application security for a U.S. Government program building a purpose-built AI Factory.

You will define the application-security acceptance criteria, scanning gates, and image-signing policy, own software supply-chain assurance standards, and ensure the platform build implements and validates against them. This hands-on role requires collaborating with software engineers, ISSOs, and security testers to secure the

Qualifications

• Bachelor's degree in Computer Science or a related field.
• 6+ years of application security architecture, secure software engineering, or related areas.
• Experience with SAST/DAST, container/image scanning, and software supply-chain assurance.
• Current, active US Government Security Clearance of TS/SCI with Polygraph

Responsibilities

• Secure CI/CD pipelines and conduct security code reviews.
• Define application-security acceptance criteria, scanning gates, and image-signing policy for an AI platform serving U.S. Government customers.
• Own software supply-chain assurance standards including artifact provenance and dependency validation.
• Collaborate with engineers, ISSOs, and security testers to integrate security throughout the development lifecycle.
• Communicate security risk and design decisions in writing; mentor other security engineers.

Skills

Bachelor's degree in Computer Science

6+ years of application security

SAST/DAST

Container/image scanning

Software supply-chain assurance

TS/SCI with Polygraph

Education

Bachelor's degree in Computer Science or related field

Job description

Amazon's Security team is seeking a Senior Application Security Engineer to lead application security for a U.S. Government program building a purpose-built AI Factory.

You will define the application-security acceptance criteria, scanning gates, and image-signing policy, own software supply-chain assurance standards, and ensure the platform build implements and validates against them. This hands-on role requires collaborating with software engineers, ISSOs, and security testers to secure the