Application Security Engineer, AWS Proactive Security

About the role

Help us protect the Amazon Web Services (AWS) cloud computing environment and all of our customers. Since 2006, AWS has enabled customers to bring great ideas to life in ways that aren’t possible in traditional IT environments. AWS Security is on the leading edge of security issues for a wide variety of platforms and technologies including cloud services, Internet of things (IoT), identity and access management, mobile devices, virtualization, and custom hardware, all operating at massive scale. As an Application Security Engineer, you will validate that our services, applications, and websites are designed and implemented to the highest security standards.

You will analyze the security of applications and services, discover and address security issues, build security automation, and quickly react to new threat scenarios. You will learn from and be mentored by those building and securing our leading-edge services. You are expected to be strong in multiple domains, develop elegant solutions to complex business problems, and apply appropriate technologies while following security engineering best practices. You will mentor more junior engineers, foster constructive dialogue, and seek resolution when confronted with discordant views. You will also participate fully in planning the AWS IT Security team's work and seek opportunities for process improvement.

Responsibilities

• Application security reviews
• Penetration testing
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

On any given day, you might be threat modeling a new architecture, reviewing code for security issues, building automation to scale security practices, or guiding a partner team through a secure design decision. Over time, you will own relationships with partner teams and become their trusted security resource.

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object-oriented language
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship)
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
• 2+ years of scripting, programming, or security code review in a common language, such as Python, Java, or C++
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services

About the team

Diverse Experiences: Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed, we encourage candidates to apply.

Why Amazon Security?: At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. We offer talented security professionals the chance to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture: In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to embrace our uniqueness. Addressing tough security challenges requires seeking out and celebrating a diversity of ideas, perspectives, and voices.

Training & Career Growth: We continuously raise our performance bar as we strive to become Earth’s Best Employer. You’ll find endless knowledge-sharing, training, and career-advancing resources here.

Work/Life Balance: We value work-life harmony. Flexible work hours and arrangements are part of our culture, ensuring success at work doesn’t come at the expense of sacrifices at home.

Pay

• USA, VA, Herndon: $159,300.00 - $202,400.00 USD annually
• USA, WA, Seattle: $159,300.00 - $202,400.00 USD annually

Benefits

• Sign-on payments and restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, and option for Supplemental life plans)
• Employee Assistance Program (EAP) and Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off and parental leave

Learn more about our benefits at amazon.jobs/en/benefits.