Application Security Engineer, AWS Proactive Security

About the role

Help us protect the Amazon Web Services (AWS) cloud computing environment and all of our customers. Since 2006, the AWS team has been enabling customers to bring great ideas to life in ways that aren’t possible in traditional IT environments. AWS Security is on the leading edge of many security issues for a wide variety of platforms and technologies including cloud services, Internet of things (IoT), identity and access management, mobile devices, virtualization, and custom hardware, all operating at massive scale. As an Application Security Engineer, you will validate that our services, applications, and websites are designed and implemented to the highest security standards.

You will analyze the security of applications and services, discover and address security issues, build security automation, and quickly react to new threat scenarios. You will learn from and be mentored by those building and securing our leading-edge services. You are expected to be strong in multiple domains, develop elegant solutions to complex business problems, and apply appropriate technologies while following security engineering best practices. You will mentor more junior engineers, foster constructive dialogue, and seek resolution when confronted with discordant views.

Responsibilities

• Application security reviews
• Penetration testing
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

You'll collaborate with engineering teams to help them build secure services from the start. On any given day, you might be threat modeling a new architecture, reviewing code for security issues, building automation to scale security practices, or guiding a partner team through a secure design decision.

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object-oriented language
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship)
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
• 2+ years of scripting, programming, or security code review in a common language, such as Python, Java, or C++
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services

Benefits

Amazon offers comprehensive benefits including:

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, and option for Supplemental life plans)
• Employee Assistance Program (EAP) and Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Pay

USA, VA, Herndon - $159,300.00 - $202,400.00 USD annually

USA, WA, Seattle - $159,300.00 - $202,400.00 USD annually

Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location.

About the team

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed, we encourage candidates to apply. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer opportunities to build experience in cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

In Amazon Security, ongoing DEI (Diversity, Equity, and Inclusion) events and learning experiences inspire us to embrace our uniqueness. We seek out and celebrate a diversity of ideas, perspectives, and voices to address the toughest security challenges.

We continuously raise our performance bar and provide endless knowledge-sharing, training, and career-advancing resources to help you develop into a better-rounded professional.

We value work-life harmony. Flexible work hours and arrangements are part of our culture, ensuring that achieving success at work does not come at the expense of sacrifices at home.