Application Security Engineer, AWS Security

Amazon.com Services LLC is hiring an Application Security Engineer for AWS Security in Seattle, WA. In this onsite role, you will help validate the security of AWS services, applications, and websites by analyzing application security, identifying issues, and driving fixes. You will also build security automation and react quickly when new threat scenarios emerge.

What you’ll do

• Conduct application security reviews across services, applications, and websites
• Perform penetration testing to discover security weaknesses
• Support projects and research as needed
• Deliver security training and outreach to internal development teams
• Create and maintain security guidance documentation
• Build security tools and automation to improve security outcomes
• Deliver security metrics and work on continuous improvements
• Assist with recruiting activities and administrative work as needed

Required qualifications

• 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship)
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
• Bachelor’s degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Technologies

• AWS
• Python, Ruby, Go, Swift, Java, .Net, C++
• HTTP, DNS, TCP/IP

Preferred qualifications

• 2+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
• 2+ years of scripting, programming, or security code review in a common language such as Python, Java, or C++
• Experience performing security activities across phases of the SDLC, including security design review, threat modeling, secure code review, and security testing

Compensation and location

• Location: Seattle, WA (onsite)
• Salary: USD 159,300 - 202,400 per year

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance including medical, dental, vision, prescription, Basic Life & AD&D, plus options for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave