Senior AppSec Engineer - Secure Code & Architecture

Amazon; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Job summary

Amazon.com Services LLC is seeking a Senior Security Engineer to collaborate with software teams, inspecting code for security issues and building frameworks to help developers work faster and more securely. You will lead by influence, prioritize risks, and guide partners toward secure solutions.

In this role you’ll develop threat models, perform secure code reviews across Java, Python, and JavaScript, and design security architectures.

Qualifications

• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience in one or more of the following domains: access- control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
• 8+ years of Application Security or Development experience

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects.
• Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript.
• Development of security automation tools.
• Adversarial security analysis using innovative tools to augment manual effort.
• Security training and outreach for internal development teams.
• Security architecture and design guidance.
• Independently solve security problems that require novel methods or approaches.
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes.

Skills

Troubleshooting

Log analysis

CLI automation

Security issue identification

Mitigation planning

Scripting

Code review

Scala

Java

Python

C/C++

Go

Network security

App security

Cryptography

Security architecture

Operations security

Application Security

Job description

Amazon.com Services LLC is seeking a Senior Security Engineer to collaborate with software teams, inspecting code for security issues and building frameworks to help developers work faster and more securely. You will lead by influence, prioritize risks, and guide partners toward secure solutions.

In this role you’ll develop threat models, perform secure code reviews across Java, Python, and JavaScript, and design security architectures.