Senior AppSec Engineer: Threat Modeling & Secure Code

Amazon

United States

On-site

USD 178,000 - 227,000

Full time

4 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Health insurance

Job summary

Amazon Stores seeks a Senior Security Engineer to collaborate with software teams to keep customers safe while building innovative services. You may review code for security issues, build frameworks for secure development, or refine designs for new services with developers.

The ideal candidate is a security generalist with deep expertise areas and strong communication to both technical and non-technical audiences. Join the Stores AppSec team to drive secure solutions at scale.

Qualifications

4+ years troubleshooting systems issues, analyzing logs, or automating tasks using command line tools.
5+ years identifying security issues and developing mitigation plans.
4+ years scripting, programming, and security code review in common languages.
Knowledge of at least two languages: Scala, Java, Python, C/C++, or Go.
8+ years of Application Security or Development experience.

Responsibilities

Creating, updating, and maintaining threat models for diverse software projects.
Manual and Automated Secure Code Review in Java, Python, and JavaScript.
Development of security automation tools.
Adversarial security analysis to augment manual effort.
Security training and outreach for internal development teams.
Security architecture and design guidance.
Independently solve security problems requiring novel methods.