Application Security Engineer

Amazon Security is hiring an Application Security Engineer based in Seattle, WA for an onsite role. The position focuses on strengthening the security posture of services, applications, and websites through rigorous reviews, practical remediation, and automation that helps teams scale secure development.

Working with engineers and security partners, you will evaluate application and mobile security, respond to evolving threat scenarios, and help improve security processes through measurable outcomes. This role also includes cross-team enablement such as training, documentation, and guidance for internal development teams.

What you’ll do

• Conduct application security reviews, including architecture reviews, threat modeling, code reviews, and security testing
• Perform mobile security reviews
• Support projects and research work as needed
• Deliver security training and outreach to internal development teams
• Provide security guidance and documentation
• Build security workflow automation to improve how security activities run
• Deliver security metrics and drive process improvements
• Assist with recruiting activities and related administrative work

Minimum qualifications

• 3+ years of non-internship work across at least 5 of these security domains: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, or identity and access controls experience
• Bachelor’s degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience with scripting, programming, and security code reviewing in a common programming language (non-internship)
• Experience troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
• Knowledge of common software security vulnerabilities (for example, OWASP top 10) and remediation techniques

Preferred qualifications

• 4+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services
• Experience with scripting, programming, or security code review using a common language such as Python, Java, or C++
• Experience performing security activities across one or more phases of the SDLC, such as security design review, threat modeling, secure code review, and security testing

Technologies

• HTTP, DNS, TCP/IP
• OWASP top 10
• Python, Java, C++
• AWS

Compensation and benefits

Salary: USD 159,300 - 202,400 per year.

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription)
• Basic Life & AD&D insurance (option for Supplemental life plans)
• EAP
• Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Team and culture

• Amazon Security values diverse experiences.
• Candidates are encouraged to apply even if they do not meet all listed qualifications and skills.
• The organization emphasizes learning and curiosity, supported by ongoing DEI events and learning experiences.
• Addressing tough security challenges includes seeking out and celebrating a diversity of ideas, perspectives, and voices.
• Knowledge-sharing, training, and career-advancing resources are available.
• Work-life harmony is supported through flexible work hours and arrangements.