At Amazon, we strive to innovate and improve the security of our diverse portfolio of subsidiaries and acquisitions. As an Application Security Engineer, you'll play a crucial role in safeguarding our wide range of products and services across various domains – specific examples include self-driving cars, mesh Wi-Fi networks, physical access control systems, and video monitoring. Our attack surface encompasses consumer devices, mobile applications, e-commerce platforms, cloud services, and more, requiring us to be agile and proactive in an ever-evolving security landscape. You'll be at the forefront of security within one of the world's most innovative companies.
Key Job Responsibilities:
As an Application Security Engineer, you will:
Analyze the security of applications and services across Amazon's subsidiaries and acquisitions
Discover and address security issues in diverse technological environments
Build and implement security automation solutions
Rapidly respond to emerging threat scenarios
Collaborate with and learn from industry-leading security professionals
Develop innovative solutions to complex business problems while adhering to security best practices
Mentor junior engineers and serve as a security thought leader within the organization
A successful candidate will possess a blend of troubleshooting, technical, and communication skills, along with the ability to manage various tasks including project work and software development. This role offers significant career growth opportunities as you expand your security expertise across multiple domains, including:
• Conducting application security reviews for diverse platforms
• Performing penetration testing on a wide range of systems and applications
• Engaging in security research projects as needed
• Providing security training and outreach to internal development teams across subsidiaries
• Developing and maintaining security guidance documentation
• Creating and improving security tools for various environments
• Delivering and enhancing security metrics
• Supporting recruiting activities and administrative work related to security initiatives
You'll have the opportunity to work with leading-edge technologies and apply your skills to secure some of the world's most widely used products and services. Your work will directly impact the safety and security of millions of users across Amazon's ecosystem of companies.
Join us in our mission to secure the future of technology across Amazon's growing family of innovative businesses.
- MS in Computer Science, Cybersecurity, or related field, or equivalent work experience.
- Six or more (6+) years experience with any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration, and network security.
- Six or more (6+) years of professional experience with security engineering, system and network security, authentication and security protocols, cryptography, or application security.- A comprehensive understanding of network and web related protocols (such as TCP/IP, UDP, DNS, HTTPS, routing protocols)
- A comprehensive understanding of cloud, web, mobile and IoT security
- Experience with multiple programming languages, preferably C++, Go, Ruby, Swift, and Java
- Demonstrable teamwork skills and resourcefulness
- Possess self-drive to keep moving things forward even in the face of ambiguity and imperfect knowledge (avoid “analysis paralysis”)
- Strong sense of ownership, urgency, and drive
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit
https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit
https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.
