Sr AWS Application Security Engineer

Senior AWS Application Security Engineer at Amazon.com Services LLC in Seattle, WA, onsite, with an annual salary range of USD 178,400 to 226,700.

Responsibilities

• Conduct security reviews of applications and services to validate risk posture
• Perform thorough threat modeling for AWS services to identify potential attack vectors
• Pursue continuous improvement and research as required to strengthen security outcomes
• Deliver security training and outreach to internal development teams
• Create and maintain security guidance documentation for engineering teams
• Develop security tooling to support security operations and automation
• Measure, report, and drive improvements in security metrics
• Assist with recruiting activities and related administrative tasks

Requirements

• More than 4 years of non-internship experience diagnosing system issues, analyzing logs, or automating complex tasks via command line tools
• Practical, non-internship experience identifying security vulnerabilities, attack patterns, and remediation techniques in industry settings
• Experience as a mentor, tech lead, or leading an engineering team
• Bachelor of Science in computer science or equivalent
• At least 4 years of hands-on technical work experience

Technologies

• C++
• Java
• Perl
• Python
• Amazon Web Services (AWS)

Benefits

• Comprehensive health insurance including medical, dental, vision, prescription, Basic Life & AD&D, with optional supplemental life plans, EAP, mental health support, medical advice line, flexible spending accounts, and adoption/surrogacy reimbursement
• 401(k) matching
• Paid time off
• Parental leave

Preferred Qualifications

• Experience applying threat modeling or equivalent risk identification techniques
• Knowledge of security in service oriented architectures, microservices, and web services
• Experience implementing security solutions at the business division level or equivalent
• Strong understanding of networking protocols including HTTP(S), DNS, and TCP/IP
• Experience with web services technologies
• Proficiency in more than one major programming language (C++, Java) and at least one scripting language (Perl, Python)
• Clear English communication skills, both written and verbal, for stakeholder collaboration at all levels

A Day in the Life

• Participate in threat modeling workshops for leading AWS services
• Innovate to deliver security outcomes for customers, leveraging AI tools to maximize results while preserving time for high judgment decisions

About the Team

Diverse experiences are valued in Amazon Security. Candidates without a traditional background or with alternative experiences are encouraged to apply.

Why Amazon Security

Security is central to maintaining customer trust and delivering delightful experiences. The team sets and maintains a high security bar across Amazon’s products and services.

Work/Life Balance

Emphasis on work-life harmony with flexible hours and arrangements to support personal and professional success.

Inclusive Team Culture

Ongoing DEI events and learning experiences encourage curiosity, celebrate diverse ideas, and welcome different voices in addressing security challenges.

Training and Career Growth

Continuous knowledge sharing, training, and career development resources to help you advance as a security professional within a global organization.