Application Security Engineer, AWS Security

About the role

Help us protect the Amazon Web Services (AWS) cloud computing environment and our customers. AWS Security manages security for a wide variety of platforms and technologies, including cloud services, IoT, identity and access management, mobile devices, virtualization, and custom hardware at massive scale. The Application Security Engineer will validate that services, applications, and websites are designed and implemented to the highest security standards, analyze security of applications and services, discover and address security issues, build security automation, and react quickly to new threat scenarios. The role includes mentoring junior engineers, contributing to security thought leadership, and participating in planning and process‑improvement activities.

Key responsibilities

• Application security reviews
• Penetration testing
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

Basic qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or a similar object‑oriented language
• 2+ years of scripting, programming, and security code review in a common programming language (non‑internship)
• 2+ years of troubleshooting system issues, analyzing logs, or automating basic tasks using command‑line tools (non‑internship)
• Bachelor’s degree in a STEM field, or 2+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• Knowledge of industry‑based security vulnerabilities and remediation techniques

Preferred qualifications

• 2+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security
• 2+ years of scripting, programming, or security code review in a common language such as Python, Java, or C++
• Knowledge of networking protocols, including HTTP(S), DNS, and TCP/IP
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Pay

Base salary range: USA, TX, Austin – $159,300 – $202,400 annually; USA, WA, Seattle – $159,300 – $202,400 annually. Compensation includes sign‑on payments and restricted stock units (RSUs).

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription)
• Basic Life & AD&D insurance with optional supplemental life plans
• Employee Assistance Program (EAP) and mental health support
• Medical advice line
• Flexible Spending Accounts
• Adoption and surrogacy reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave