Senior AppSec Engineer: Threat Modeling & Secure Code

Amazon; Seattle, Northern (WA, KY); Hybrid; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

Job summary

Amazon Stores Security is seeking a Security Engineer II to collaborate with software development teams, review code for security, and develop security automation tools across Java, Python, and JavaScript. The role focuses on threat modeling, security design guidance, and influencing product teams to deliver secure solutions.

You will participate in adversarial analysis and contribute to security training, aiming to reduce on-call time and improve security outcomes across AWS and retail

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience.
• Bachelor's degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript
• Development of security automation tools
• Adversarial security analysis using modern tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes

Skills

Python

Java

JavaScript

Go

C++

Education

Bachelor's degree in computer science or equivalent

Tools

AWS

Security automation tools

Job description

Amazon Stores Security is seeking a Security Engineer II to collaborate with software development teams, review code for security, and develop security automation tools across Java, Python, and JavaScript. The role focuses on threat modeling, security design guidance, and influencing product teams to deliver secure solutions.

You will participate in adversarial analysis and contribute to security training, aiming to reduce on-call time and improve security outcomes across AWS and retail