Senior AppSec Engineer Threat Modeling and Secure Code

Cybersecurity Jobs; Seattle (WA); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Security in Seattle is seeking a Senior Security Engineer in AppSec to deepen expertise across cloud, retail technologies, operations, and physical stores, collaborating with software teams to build secure services and protect customer trust.

You will perform threat modeling, secure code review in Java, Python, and JavaScript, and develop automation tools while training internal teams and guiding security architecture across partnerships.

Qualifications

• 4+ years of troubleshooting systems issues, analyzing logs, or automating tasks using command line tools.
• 5+ years identifying security issues and risks, and developing mitigation plans.
• 4+ years scripting, programming, and security code review in common languages.

Responsibilities

• Create, update, and maintain threat models for various software projects.
• Perform manual and automated secure code review in Java, Python, and JavaScript.
• Develop security automation tools to improve outcomes at scale.
• Conduct adversarial security analysis using innovative tooling.
• Provide security training and outreach for internal development teams.
• Deliver security architecture and design guidance to partners.
• Independently solve security problems with novel methods.
• Influence team priorities and decisions to improve security results.

Skills

Troubleshooting

Security issues

Scripting

Languages

Vulnerabilities

Domain experience

Application security

Job description

Amazon Security in Seattle is seeking a Senior Security Engineer in AppSec to deepen expertise across cloud, retail technologies, operations, and physical stores, collaborating with software teams to build secure services and protect customer trust.

You will perform threat modeling, secure code review in Java, Python, and JavaScript, and develop automation tools while training internal teams and guiding security architecture across partnerships.