Security Engineer, AWS AppSec

AWS Security is looking for an Application Security Engineer to help validate that our services, applications, and websites are designed and implemented to the highest security standards. You will analyze the security of applications and services, discover and address security issues, build security automation, and quickly react to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those building and securing our innovative services.

About the role

A Security Engineer at Amazon is expected to be strong in multiple domains and provide significant contributions to the AWS IT Security team and multiple groups throughout Amazon. You will develop elegant solutions to complex business problems, apply appropriate technologies, and follow security engineering best practices. You must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role participate fully in planning the team's work and constantly seek opportunities for process improvement.

You will have a deep understanding of at least one specialty for which you are a sought-out resource (both within AWS IT Security and by groups throughout Amazon), while understanding the application of Information Security in a broad range of technical areas. This role requires troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks including project and software development work.

Responsibilities

• Application security reviews
• Mobile security reviews
• Secure architecture design
• Threat modeling
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements

Qualifications

• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploit development or equivalent
• Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance

Preferred Qualifications

• Experience with AWS services or other cloud offerings
• Experience with AWS products and services
• Experience programming in Java, C++, Python, or related language

About the team

Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization creates and maintains a high bar for security across all Amazon’s products and services. We offer opportunities to build experience in cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture
In Amazon Security, we learn and are curious. Ongoing DEI events and learning experiences inspire us to embrace our uniqueness. Addressing security challenges requires seeking out and celebrating diverse ideas, perspectives, and voices.

Training & Career Growth
We continuously raise our performance bar as we strive to become Earth’s Best Employer. You’ll find knowledge-sharing, training, and career-advancing resources to develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Flexible work hours and arrangements are part of our culture. When we feel supported at work and home, there’s nothing we can’t achieve.

Pay

The base salary range for this position is:

• USA, VA, Herndon: $136,000 - $184,000 USD annually
• USA, WA, Seattle: $136,000 - $184,000 USD annually

Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on experience, qualifications, and location.

Benefits

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D, and optional supplemental life plans)
• Employee Assistance Program (EAP) and Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off and parental leave

Learn more about our benefits at amazon.jobs/en/benefits.