Application Security Engineer

Amazon Security is hiring an

Application Security Engineer

based in

Seattle, WA

for an

onsite

role. The position focuses on strengthening the security posture of services, applications, and websites through rigorous reviews, practical remediation, and automation that helps teams scale secure development.

Working with engineers and security partners, you will evaluate application and mobile security, respond to evolving threat scenarios, and help improve security processes through measurable outcomes. This role also includes cross-team enablement such as training, documentation, and guidance for internal development teams.

What you’ll do

Conduct

application security reviews , including architecture reviews, threat modeling, code reviews, and security testing

Perform

mobile security reviews

Support

projects and research work

as needed

Deliver

security training and outreach

to internal development teams

Provide

security guidance and documentation

Build

security workflow automation

to improve how security activities run

Deliver

security metrics

and drive

process improvements

Assist with

recruiting activities

and related administrative work

Minimum qualifications

3+ years

of non-internship work across at least

5

of these security domains: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, or identity and access controls experience

Bachelor’s degree

in computer science or equivalent

Knowledge of

networking protocols

such as

HTTP, DNS and TCP/IP

Experience with

scripting, programming, and security code reviewing

in a common programming language (non-internship)

Experience troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)

Knowledge of common

software security vulnerabilities

(for example,

OWASP top 10 ) and

remediation techniques

Preferred qualifications

4+ years

of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security experience

Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks

Experience with

AWS products and services

Experience with scripting, programming, or security code review using a common language such as

Python, Java, or C++

Experience performing security activities across one or more phases of the

SDLC , such as security design review, threat modeling, secure code review, and security testing

Technologies

HTTP, DNS, TCP/IP

OWASP top 10

Python, Java, C++

AWS

Compensation and benefits

Salary:

USD

159,300 - 202,400

per year.

Sign-on payments

Restricted stock units (RSUs)

Health insurance (medical, dental, vision, prescription)

Basic Life & AD&D insurance (option for Supplemental life plans)

EAP

Mental Health Support

Medical Advice Line

Flexible Spending Accounts

Adoption and Surrogacy Reimbursement coverage

401(k) matching

Paid time off

Parental leave

Team and culture

Amazon Security values diverse experiences.

Candidates are encouraged to apply even if they do not meet all listed qualifications and skills.

The organization emphasizes learning and curiosity, supported by ongoing DEI events and learning experiences.

Addressing tough security challenges includes seeking out and celebrating a diversity of ideas, perspectives, and voices.

Knowledge-sharing, training, and career-advancing resources are available.

Work-life harmony is supported through flexible work hours and arrangements.

#J-18808-Ljbffr