Application Security Engineer

As an Application Security Engineer within Amazon's AWS Security organization, you'll help strengthen the security of applications and services across the AWS ecosystem. You will perform security reviews, conduct penetration tests, and drive security automation across AWS platforms, collaborating with development teams to reduce risk in a fast-moving environment.

Location: New York, NY onsite. Salary: USD 153,400 - 207,500 per year. Experience: 2+ years. Education: Bachelor's degree in computer science or equivalent.

Responsibilities

• Conduct application security reviews to identify risks and guide mitigations
• Perform penetration testing to uncover vulnerabilities
• Contribute to projects and security research as needed
• Deliver security training and outreach to internal development teams
• Produce security guidance documentation for engineering teams
• Develop security tools to automate checks and scale security programs
• Deliver security metrics and drive continuous improvements
• Assist with recruiting activities and administrative tasks

Requirements

• Solid understanding of system security vulnerabilities and remediation techniques, including penetration testing and exploit development or equivalent
• Hands-on experience with web protocols, common security attacks, and remediation (non-internship)
• 2+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
• Bachelor's degree in computer science or equivalent, or 2+ years of IT security experience

Technologies

• AWS
• C++
• Java
• Perl
• Python
• TCP/IP
• UDP
• IPSEC
• HTTP
• SOAP
• WSDL
• XSD
• REST

Benefits

• Health insurance
• 401(k) matching
• Paid time off
• Parental leave

Description

This role focuses on protecting not only the AWS cloud infrastructure but also our customers' environments. Since 2006, AWS has enabled innovators to bring ideas to life beyond traditional IT. AWS security teams work across a broad range of platforms to identify and remediate security issues, helping to ensure a trustworthy and secure cloud experience.

About the Team

Amazon Security values diverse experiences and encourages applications from candidates who may not meet every listed qualification. If your career path has taken nontraditional routes or includes alternative experiences, your application is welcome.

Why Amazon Security?

Security is central to maintaining customer trust and delivering outstanding experiences. This team is tasked with establishing and upholding a high security standard across Amazon products and services.

Inclusive Team Culture

Curiosity and continuous learning are part of our identity. Ongoing DEI events and learning opportunities help us embrace a range of ideas, perspectives, and voices.

Training & Career Growth

We continuously raise our performance bar and provide knowledge sharing, training, and resources to support your development into a well-rounded professional.

Work/Life Balance

Flexible work hours and arrangements are part of our culture, reflecting a commitment to supporting both professional and personal needs.