Sr AWS Application Security Engineer

This senior security engineering position focuses on validating the security of AWS based services, applications, and web properties, conducting threat modeling, security reviews, automation efforts, and cross-team guidance to strengthen the organization’s security posture.

Responsibilities

• Lead application security reviews to identify and mitigate risks in software and cloud deployments
• Perform thorough threat modeling of AWS services and architectures
• Drive continuous improvement and research initiatives to advance security capabilities
• Deliver security training and outreach to internal development teams
• Create and maintain security guidance documentation for engineering groups
• Develop and maintain security tooling to automate checks and controls
• Provide security metrics and drive improvements based on data-driven insights
• Support recruiting activities and perform related administrative tasks as needed

Requirements

• Four or more years of non-internship experience troubleshooting complex systems, analyzing logs, or automating tasks via command line tools
• Hands-on industry experience identifying security vulnerabilities, attack patterns, and remediation techniques
• Experience as a mentor, tech lead, or leading an engineering team
• Bachelor's degree in computer science or an equivalent field
• Four or more years of technical work experience

Technologies

• C++, Java, Perl, Python, and practical experience with Amazon Web Services (AWS)

Benefits

• Comprehensive health coverage including medical, dental, vision, prescription, basic Life and AD&D insurance with options for supplemental life plans, an Employee Assistance Program, mental health support, medical advice line, flexible spending accounts, and adoption or surrogacy reimbursements
• 401(k) retirement plan with company matching
• Paid time off
• Parental leave

Preferred Qualifications

• Experience applying threat modeling or equivalent risk identification techniques
• Background in security for service oriented architectures, microservices, and web services
• Experience deploying security solutions at the level of a business division or equivalent
• Knowledge of networking protocols including HTTP(S), DNS, and TCP/IP
• Familiarity with web services and related technologies
• Proficiency in more than one major programming language (C++, Java) and at least one scripting language (Perl, Python)
• Strong English communication skills, written and verbal, to engage effectively with stakeholders at all levels

A Day in the Life

• Participate in workshops to threat model key AWS services and define secure outcomes for customers
• Explore innovative approaches, including AI tools, to enhance security results while preserving time for high-judgment decisions

About the Team

Diversity of experience is valued within Amazon Security. Candidates who do not meet every preferred qualification are encouraged to apply, and non-traditional career paths or alternative experiences should not deter applicants.

Why Amazon Security

Security is central to maintaining customer trust and delivering exemplary experiences. The team is responsible for establishing and upholding high security standards across Amazon products and services.

Work/Life Balance

Flexibility is a core aspect of the culture, with adaptable work hours and arrangements to support harmony between professional responsibilities and home life.

Inclusive Team Culture

curiosity and learning are in our nature. Ongoing diversity, equity, and inclusion events and learning experiences help us embrace diverse ideas, perspectives, and voices as we tackle security challenges.

Training and Career Growth

Continuous development is emphasized through knowledge sharing, training, and resources that support career advancement and broader professional growth.