Senior AppSec Engineer for AI Platform & Supply Chain

Amazon Web Services (AWS); Herndon (VA); On-site; USD 178,000 - 227,000; Full time

Job summary

Amazon Web Services, Inc. is seeking a Senior Application Security Engineer to lead application security for a U.S. Government program building a purpose-built AI Factory.

You will define acceptance criteria, scanning gates, and image-signing policy, and own software supply-chain standards in collaboration with engineers, ISSOs, and security testers. The role requires a TS/SCI with Polygraph clearance and involves securing the pipeline that delivers AI capabilities to the mission, with

Qualifications

• Bachelor's degree in Computer Science or a related field.
• 6+ years of application security architecture, secure software engineering, security code reviews, security testing, or security infrastructure.
• Experience with SAST/DAST, container/image scanning, and software supply-chain assurance.
• Current, active US Government Security Clearance of TS/SCI with Polygraph.

Responsibilities

• Partner with platform software teams to secure CI/CD pipelines, conduct security code reviews, and drive remediation of identified vulnerabilities.
• Define application-security acceptance criteria, scanning gates, and image-signing policy for an AI platform serving U.S. Government customers.
• Own software supply-chain assurance standards — including artifact provenance, dependency validation, and image-signing policy — and ensure the platform build implements and validates against them.
• Collaborate with software engineers, ISSOs, and security testers to integrate security throughout the development lifecycle.
• Communicate security risk and design decisions in writing to technical and non-technical audiences, and mentor other security engineers.

Skills

6+ years of security architecture

Security code reviews

SAST/DAST

container/image scanning

software supply-chain

communication with stakeholders

Education

Bachelor's degree in Computer Science or related field

Job description

Amazon Web Services, Inc. is seeking a Senior Application Security Engineer to lead application security for a U.S. Government program building a purpose-built AI Factory.

You will define acceptance criteria, scanning gates, and image-signing policy, and own software supply-chain standards in collaboration with engineers, ISSOs, and security testers. The role requires a TS/SCI with Polygraph clearance and involves securing the pipeline that delivers AI capabilities to the mission, with