Senior Proactive App Security Engineer - Threat Modeling

Amazon Inc.; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Job summary

Amazon is seeking a Sr. Security Engineer to validate that services, applications, and websites meet high security standards. You will analyze security, identify issues, build automation, and mentor junior engineers across teams.

The role requires deep expertise in application security, threat modeling, reviews, and collaboration to drive security metrics and improvements. AWS Security fosters growth and knowledge sharing.

Qualifications

• 5+ years of experience in application security frameworks and related areas.
• 5+ years of full secure software development life cycle, including coding standards and reviews.
• 4+ years of scripting, programming, and security code review in common languages.
• Knowledge of at least two programming languages from the list.

Responsibilities

• Application security reviews including architecture reviews and threat modeling.
• Mobile security reviews.
• Projects and research work as needed.
• Security training and outreach to internal development teams.
• Security guidance and documentation.
• Security workflow automation.
• Security metrics delivery and process improvements.
• Assistance with recruiting activities and administrative work.

Skills

Application security frameworks

Identity and access controls

Incident response

Mobile security

Cloud computing and security

AI security

Threat intelligence

Penetration testing

Scala

Java

Python

C/C++

Go

Education

Bachelor's degree in Computer Science or a related field

Job description

Amazon is seeking a Sr. Security Engineer to validate that services, applications, and websites meet high security standards. You will analyze security, identify issues, build automation, and mentor junior engineers across teams.

The role requires deep expertise in application security, threat modeling, reviews, and collaboration to drive security metrics and improvements. AWS Security fosters growth and knowledge sharing.