onsite
Senior AWS Application Security Engineer - Amazon.com
Security Engineer
Lead the design and implementation of secure cloud applications on AWS, driving threat modeling, secure coding practices, and incident response for high‑scale services.
About the role
Key Responsibilities
- Architect and enforce secure application designs across AWS services, ensuring compliance with industry standards and internal security policies.
- Conduct threat modeling, code reviews, and security assessments for new and existing applications, identifying and mitigating risks early in the development lifecycle.
- Collaborate with DevOps, SRE, and product teams to integrate security controls into CI/CD pipelines and automate security testing.
- Lead incident response efforts for application‑level security events, performing root‑cause analysis and implementing remediation plans.
- Develop and maintain security tooling, dashboards, and metrics to monitor application security posture at scale.
Requirements
- 5+ years of experience in application security within cloud environments, preferably AWS.
- Deep knowledge of AWS security services (IAM, KMS, Cognito, GuardDuty, Security Hub) and secure coding practices.
- Proficiency in threat modeling, vulnerability assessment, and secure architecture design.
- Strong scripting skills (Python, Bash) and familiarity with CI/CD automation tools.
- Excellent communication skills and ability to influence cross‑functional teams.