Amazon Security is seeking an Application Security Engineer to help ensure Amazon services, applications, and websites meet high security standards. This role supports application security reviews, helps identify and address security issues, and contributes to automation and response as new threat scenarios emerge.

The position is based in Seattle, WA (onsite) and offers a salary range of USD 159,300 - 202,400 per year. You will collaborate with security and development teams to improve security practices across the software development lifecycle.

Key Responsibilities

Perform application security reviews, including architecture reviews, threat modeling, code reviews, and security testing
Conduct mobile security reviews
Support projects and research work as needed
Provide security training and outreach to internal development teams
Deliver security guidance and documentation
Build and improve security workflow automation
Share security metrics and drive process improvements
Assist with recruiting activities and administrative work

Requirements

3+ years of non-internship experience across at least 5 security domains from: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, or identity and access controls
Bachelor’s degree in computer science or equivalent
Knowledge of networking protocols including HTTP, DNS, and TCP/IP
Non-internship experience with scripting and programming plus security code review in a common programming language
Non-internship experience troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools
Knowledge of common software security vulnerabilities (such as OWASP Top 10) and remediation techniques

Technologies

HTTP, DNS, TCP/IP
OWASP Top 10
Python, Java, C++
AWS

Preferred Qualifications

4+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
Experience with AWS products and services
Experience scripting, programming, or performing security code reviews using a common language such as Python, Java, or C++
Experience performing security activities across phases of the SDLC, such as security design review, threat modeling, secure code review, and security testing

Benefits

Sign-on payments
Restricted stock units (RSUs)
Health insurance (medical, dental, vision, prescription)
Basic Life & AD&D insurance (option for Supplemental life plans)
EAP
Mental Health Support
Medical Advice Line
Flexible Spending Accounts
Adoption and Surrogacy Reimbursement coverage
401(k) matching
Paid time off
Parental leave

About the Team

Amazon Security values diverse experiences.
If you do not meet all qualifications and skills listed, candidates are encouraged to apply.
The organization emphasizes learning and curiosity, with ongoing DEI events and learning experiences.
Addressing security challenges involves seeking and celebrating diversity of ideas, perspectives, and voices.
The team provides knowledge-sharing, training, and other career-advancing resources.
Work-life harmony is valued, including flexible work hours and arrangements.

Application Security Engineer