Senior AWS AppSec Engineer (Hybrid)

System One; Knoxville (TN); Hybrid; USD 110,000 - 160,000; Full time

Job summary

System One is seeking an experienced AWS Application Security Analyst to support security initiatives within a large-scale financial services environment in the Knoxville, TN area on a hybrid schedule. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks across the Software Development Lifecycle.

The ideal candidate has hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, DevSecOps, CI/CD

Qualifications

• 5+ years of application security experience and knowledge of secure software development practices.
• Hands-on experience with SAST, DAST, and SCA tools.
• Experience performing manual code reviews and security assessments.
• Strong experience with threat modeling and security risk assessments.
• Working knowledge of AWS security and securing applications in AWS.

Responsibilities

• Perform manual and automated application and source-code security reviews to identify vulnerabilities and risks.
• Conduct threat modeling and security risk assessments for new and existing applications.
• Collaborate with development teams to determine remediation approaches for findings.
• Utilize SAST, DAST, and SCA tools for application security testing.
• Integrate application security controls and automated testing into CI/CD pipelines.
• Evaluate security risks across AWS cloud and containerized environments.
• Apply secure coding practices and knowledge of network protocols, encryption, and authentication.
• Partner with Dev, Cloud, and Cybersecurity teams to strengthen DevSecOps across the SDLC.
• Develop security guidance, standards, and reusable best practices for development teams.
• Clearly communicate findings and remediation recommendations to technical stakeholders.

Skills

SAST

DAST

SCA

Threat modeling

DevSecOps

CI/CD security

AWS security

Container security

Java

Python

JavaScript

C#

Communication skills

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field

Tools

GitHub

Jenkins

CI/CD tools

Job description

System One is seeking an experienced AWS Application Security Analyst to support security initiatives within a large-scale financial services environment in the Knoxville, TN area on a hybrid schedule. The role partners with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks across the Software Development Lifecycle.

The ideal candidate has hands-on experience with SAST, DAST, SCA, threat modeling, secure code review, DevSecOps, CI/CD