Application Security Engineer

Build and scale security across services, applications, and websites with a team focused on fast threat discovery, practical remediation, and repeatable security improvements. This onsite role in Austin, TX supports developers through reviews, automation, and clear guidance, while helping protect Amazon customers and internal teams.

Compensation: USD 159,300 - 202,400 per year.

What you’ll do

• Perform application security reviews including architecture reviews, threat modeling, code reviews, and security testing
• Conduct mobile security reviews as part of security assessments
• Work on projects and research as needed to address emerging security challenges
• Deliver security training and outreach to internal development teams
• Provide security guidance and documentation to support safer development practices
• Build security workflow automation to improve how security work is executed
• Deliver security metrics and drive process improvements
• Support recruiting activities and handle administrative work as needed

What you bring

• 3+ years of non-internship work across at least 5 security domains such as application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, or identity and access controls
• Bachelor’s degree in computer science or equivalent
• Experience with scripting, programming, and security code reviewing in a common programming language (non-internship)
• Knowledge of common software security vulnerabilities (for example, OWASP Top 10) and corresponding remediation techniques

Technologies you may use

• Python, Java, C++
• OWASP Top 10
• AWS products and services

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, plus option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave

Preferred qualifications

• 4+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services
• Experience performing security activities across phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing