Key job responsibilities
As a successful Application Security Engineer within ATG Security, you will be seen as a leader and play a key role in ensuring security is built into our applications and services and partnering with development teams to maintain a high security bar. You will collaborate with security champions within our engineering teams to drive the implementation and validation of security controls prior to production launch. You will:
- Provide durable, technical security guidance to mitigate identified risks.
- Review existing processes and suggest improvements for increased security and efficiency.
- Independently solve security problems that require novel methods or approaches
- Embrace GenAI and the security challenges it brings, to be able to guide builders in building leveraging GenAI securely.
- Participate in and support application security reviews that include threat modeling, code review, and security testing.
- Mentor and guide security champions embedded throughout the engineering team
A day in the life
As a successful Application Security Engineer within ATG Security, you will be seen as a strong leader who prioritizes well, communicates clearly and compellingly understands how to drive a high level of operational and strategic excellence within a team, while collaborating with a variety of internal and external business partners. You must show exemplary judgment in making technical trade-offs between short- versus long-term security and business goals. A successful candidate must be one that can handle several difficult challenges and problems, can make risk-based assessments founded on data and facts rather than older static based security paradigms, though being aware of the older best practices.
About the team
BASIC QUALIFICATIONS
- 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
- 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
- Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
- Experience as a mentor, tech lead or leading an engineering team
- 3+ years of non-internship work across at least 5 of the following security domains: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, or identity and access controls experience
PREFERRED QUALIFICATIONS
- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience with security in service-oriented architectures/microservices and web services
- Experience architecting, securing, and operating Amazon Web Services
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, CA, Culver City - 178,400.00 - 226,700.00 USD annually
USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually
