Application Security Engineer

Amazon.com Services LLC is hiring an Application Security Engineer to support AWS services, applications, and websites in meeting high security standards. In this Arlington, VA onsite role, you will help validate security posture through reviews, testing, and engineering-focused automation, while staying responsive to emerging threat scenarios.

As part of the application security function, you will analyze security risks across software and web properties, identify weaknesses, and drive improvements through practical tooling and security guidance for development teams.

Responsibilities

• Conduct application security reviews
• Perform penetration testing
• Support projects and research work as needed
• Provide security training and outreach to internal development teams
• Create security guidance documentation
• Develop security tools
• Deliver security metrics and drive improvements based on findings
• Assist with recruiting activities and administrative work

Requirements

• Bachelor's degree in computer science (or equivalent)
• Knowledge of networking protocols including HTTP, DNS, and TCP/IP
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++, or another object-oriented language
• Experience with any combination of: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more domains including: web application development, penetration testing, mobile security, cryptography, public key infrastructure, forensic security, IP security, SSL/TLS, computer viruses and malware, network security, trusted security, trusted execution, threat intelligence, or IoT security implications, or authentication

Technologies

• HTTP, DNS, TCP/IP
• Python, Ruby, Go, Swift, Java, .Net, C++
• SSL/TLS, public key infrastructure, IP security
• Cryptography, threat intelligence

Benefits

• Health insurance including medical, dental, vision, prescription, Basic Life & AD&D, and options for Supplemental life plans, plus EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

Preferred Qualifications

• Experience with AWS products and services
• Experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
• Experience with programming languages such as Python, Java, C++
• Knowledge of security technology and concepts including Authentication, Authorization, Single sign-on, Cryptography, etc.
• Experience working directly with security and engineering teams
• Knowledge of network and web related protocols such as TCP/IP, UDP, IPSEC, HTTP, or equivalent
• Experience with web services and related technologies

Location: Arlington, VA (onsite). Salary: USD 159,300 - 202,400 per year.