Application Security Engineer

Join a security-focused team helping validate that AWS services, applications, and websites maintain high security standards. This onsite role in Arlington, VA emphasizes practical impact through application security reviews, threat scenario response, and security automation that strengthens how teams ship.

What you’ll do

• Conduct application security reviews to assess security posture
• Perform penetration testing and help uncover application and service vulnerabilities
• Carry out projects and research work as needed to support security outcomes
• Provide security training and outreach to internal development teams
• Produce security guidance documentation and support clear, actionable recommendations
• Develop security tools to improve repeatability and coverage
• Deliver and improve security metrics to track progress over time
• Assist with recruiting activities and other administrative work

Key requirements

• Bachelor’s degree in computer science (or equivalent)
• Knowledge of networking protocols including HTTP, DNS, and TCP/IP
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language
• Experience with any combination of: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more domains such as web application development, mobile security, public key infrastructure, cryptography, SSL/TLS, network security, authentication, or related security concepts

Technologies you may work with

• HTTP, DNS, TCP/IP
• Python, Ruby, Go, Swift, Java, .Net, C++
• SSL/TLS, public key infrastructure, IP security, cryptography, threat intelligence

Compensation and benefits

Salary range: USD 159,300 to 202,400 per year.

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D, and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

Preferred qualifications

• Experience with AWS products and services
• Experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
• Experience with programming languages such as Python, Java, C++
• Knowledge of security technology and concepts including authentication, authorization, single sign-on, cryptography
• Experience working directly with security and engineering teams
• Knowledge of network and web-related protocols such as TCP/IP, UDP, IPSEC, HTTP (or equivalent)
• Experience with web services and related technologies