Amazon
Application Security Engineer, Proactive Security
$136K–$184K
Seattle, WA · Full-time · Posted Sep 10, 2026
- Experience
- 2+ years of web protocols, common security attacks, and remediation (non-internship) experience; also requires experience in one or more specified application-security areas and coding or scripting.
- Education
- Bachelor's degree in Engineering, Computer Science, or a related field.
About the job
Conduct application security reviews and threat modeling, test security controls, and guide teams in remediating vulnerabilities before launch.
What you'll do
- Review service designs and threat models; identify and document security risks and remediation guidance.
- Conduct or coordinate penetration testing and verify fixes to security findings.
- Advise development teams on secure coding, authentication and authorization, cryptography, and data protection.
What they ask for
- 2+ years of web protocols, common security attacks, and remediation (non-internship) experience.
- Bachelor's degree in Engineering, Computer Science, or a related field.
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
- Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure; and coding or scripting in one or more languages.
Nice to have
- Experience with AWS services or other cloud offerings.
- Experience in application security frameworks, penetration testing, mobile or cloud security, AI security, identity and access controls, or related security areas.
Pay
136,000.00 - 184,000.00 USD annually (base salary)
Tools
Python, C, C++, Java, Ruby, PowerShell, AWS
AI focus
AI security is listed as a preferred area of experience; no specific AI duties are stated.
Model-written summary · the original posting is authoritative