Application Security Engineer, AWS Security

$125,500 - $212,800/Yr

Amazon - New York, NY

Full-time - Entry Level

New York, NY

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The Application Security Engineer at AWS Security is responsible for ensuring that Amazon's services, applications, and websites adhere to the highest security standards. This role involves analyzing application security, addressing vulnerabilities, building security automation, and responding to emerging threats. The engineer will also mentor junior staff and contribute to the AWS IT Security team, focusing on developing solutions to complex security challenges while promoting best practices in security engineering.

Responsibilities

• Conduct application security reviews to identify vulnerabilities in software applications.
• Perform mobile security reviews to ensure the security of mobile applications.
• Design secure architecture for applications and services.
• Engage in threat modeling to anticipate potential security threats.
• Participate in projects and research work as needed to enhance security measures.
• Provide security training and outreach to internal development teams to improve security awareness.
• Develop security guidance documentation to assist teams in implementing secure systems.
• Create and enhance security tools to automate security processes.
• Deliver security metrics to stakeholders and work on improving security posture.
• Assist with recruiting activities and perform administrative work related to security tasks.

Requirements

• Bachelor's degree in computer science, computer engineering, or a related field.
• Minimum of 2 years of experience in threat modeling, secure coding, identity management, software development, cryptography, system administration, or network security.
• Minimum of 2 years of experience in security engineering, system and network security, authentication and security protocols, cryptography, or application security.

Nice-to-haves

• Experience implementing security solutions at the business division level.
• Understanding of network and web-related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).
• Familiarity with web services and device communications.
• Experience with multiple programming languages (Java, C++, Ruby, Python, Go, etc.).
• Excellent written and verbal communication skills.
• Demonstrable teamwork skills and resourcefulness.
• Self-driven with a strong sense of ownership and urgency.

Benefits

• Flexible work hours and arrangements.
• Training and career growth opportunities.
• Diversity and inclusion initiatives.
• Work-life balance support.