Application Security Engineer, AWS Proactive Security

$125,500 - $212,800/Yr

Amazon - San Diego, CA

Full-time - Entry Level

San Diego, CA

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The Application Security Engineer at AWS Security is responsible for ensuring that Amazon's services, applications, and websites meet the highest security standards. This role involves analyzing application security, addressing vulnerabilities, building security automation, and responding to emerging threats. The engineer will collaborate with various teams, mentor junior engineers, and contribute to security best practices across the organization.

Responsibilities

• Conduct application security reviews including architecture reviews, threat modeling, code reviews, and security testing.
• Perform mobile security reviews.
• Engage in projects and research work as needed.
• Provide security training and outreach to internal development teams.
• Create security guidance and documentation.
• Automate security workflows.
• Deliver security metrics and implement process improvements.
• Assist with recruiting activities and administrative tasks.

Requirements

• Bachelor's degree in Computer Science or related field, or equivalent work experience.
• Minimum of 2+ years of experience in security engineering, system and network security, authentication and security protocols, cryptography, or application security.
• Familiarity with common attack patterns and exploitation techniques for web and mobile applications and IoT devices.
• Knowledge of software security vulnerabilities (e.g., OWASP top 10) and remediation techniques.
• Understanding of basic networking and network security concepts (TCP/UDP, Firewalls/Switches, Wi-Fi security, TLS, etc.).

Nice-to-haves

• Strong understanding of network and web-related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).
• Experience with Security Engineering and Assurance methodologies (e.g., fuzzing, static and dynamic code analysis).
• Experience with IoT/embedded device security (hardware & firmware security).
• Demonstrable teamwork skills and resourcefulness.
• Self-driven with the ability to move initiatives forward despite ambiguity.
• Ability to manage multiple complex security reviews while providing effective guidance to stakeholders.
• Strong sense of ownership and urgency with excellent communication skills.

Benefits

• Flexible work hours and arrangements.
• Endless knowledge-sharing and training resources for career advancement.