Application Security Engineer

Responsibilities

• Application security reviews
• Penetration testing
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

Requirements

• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Bachelor's degree in computer science or equivalent, or 2+ years of IT Security experience

Technologies

• AWS
• C++
• Java
• Perl
• Python
• TCP/IP
• UDP
• IPSEC
• HTTP
• SOAP
• WSDL
• XSD
• REST

Benefits

• Health insurance
• 401(k) matching
• Paid time off
• Parental leave

Description

The role contributes to protecting the AWS cloud computing environment as well as customer environments. Since 2006, AWS Security has enabled customers to bring ambitious ideas to life in ways not possible in traditional IT settings. The team provides flexible compute, storage, security, and other services to support business needs on a global scale. AWS Security leads the discovery of security issues across a wide range of platforms and technologies.

About the Team

Amazon Security embraces diverse experiences and perspectives. If you do not meet every qualification, you are encouraged to apply. The team values varied career paths and experiences, welcoming candidates who are just starting out or who come from nontraditional backgrounds.

Why Amazon Security?

Security sits at the core of customer trust and delightful experiences at Amazon. The Security organization is responsible for maintaining a high standard of security across all Amazon products and services.

Inclusive Team Culture

The Amazon Security team emphasizes curiosity and continual learning. Ongoing DEI events and learning experiences help teammates grow and celebrate a range of ideas, perspectives, and voices while addressing complex security challenges.

Training & Career Growth

The team supports ongoing knowledge sharing, training, and resources to help you develop into a well-rounded security professional and advance your career.

Work/Life Balance

The culture prioritizes work-life harmony, offering flexible hours and arrangements to support both professional success and home life.