Senior AppSec Engineer - Threat Modeling & Secure Coding

Cybersecurity Jobs; San Francisco (CA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Sign-on payments

RSUs

Health insurance

Time off

Job summary

Amazon.com Services LLC in California is seeking an experienced Application Security engineer (SecEng III, AppSec) to elevate secure engineering at scale through hands-on security work, automation, and collaboration with software teams. This role targets experts with 8+ years in App Security or development and requires strong threat modeling and secure code review across Java, Python, and JavaScript.

The position offers sign-on payments, RSUs, comprehensive healthcare, and time off.

Qualifications

• 4+ years troubleshooting systems issues or automating tasks.
• 5+ years identifying security issues and mitigating risks.
• 4+ years scripting, programming, and security code review.
• Knowledge of at least two of Scala, Java, Python, C/C++, Go.
• Experience identifying industry vulnerabilities and remediation techniques.
• 8+ years Application Security or Development experience.

Responsibilities

• Create, update, and maintain threat models across many software projects.
• Perform manual and automated secure code reviews using Java, Python, and JavaScript.
• Build security automation tools to increase coverage and efficiency.
• Conduct adversarial security analysis to strengthen defenses.
• Support internal teams through security training and outreach.
• Provide security architecture and design guidance to development partners.
• Independently tackle security problems requiring novel methods.
• Help shape team processes, priorities, and choices to improve security outcomes.

Skills

Troubleshooting

Security risk assessment

Scripting

Programming

Code review

Application Security

Java

Python

Tools

Java

Python

JavaScript

Scala

C/C++

Go

Command line tools

Job description

Amazon.com Services LLC in California is seeking an experienced Application Security engineer (SecEng III, AppSec) to elevate secure engineering at scale through hands-on security work, automation, and collaboration with software teams. This role targets experts with 8+ years in App Security or development and requires strong threat modeling and secure code review across Java, Python, and JavaScript.

The position offers sign-on payments, RSUs, comprehensive healthcare, and time off.