SecEng III, AppSec

Amazon.com Services LLC offers an Application Security role based in California (onsite) , with a compensation range of USD 178,400 - 226,700 per yearly . The position supports secure engineering at scale through hands-on security work, automation, and collaboration with software teams, with sign-on payments , RSUs , comprehensive healthcare, and time off.

This SecEng III, AppSec opportunity is designed for experienced engineers with 8+ years in Application Security or Development, who want to improve outcomes by influencing how teams approach threat modeling, secure code review, and security design.

What you’ll do

• Create, update, and maintain threat models across a wide variety of software projects.
• Perform manual and automated secure code reviews , primarily using Java, Python, and JavaScript .
• Build security automation tools to increase coverage and efficiency.
• Conduct adversarial security analysis using innovative tools to strengthen and augment manual effort.
• Support internal teams through security training and outreach .
• Provide security architecture and design guidance to development partners.
• Independently tackle security problems that require novel methods or approaches.
• Help shape team and partner process, priorities, and choices to improve security outcomes.

Required qualifications

• 4+ years (non-internship) troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools .
• 5+ years identifying security issues and risks and developing mitigation plans .
• 4+ years (non-internship) scripting, programming, and security code review in common programming languages.
• Knowledge of at least two of: Scala, Java, Python, C/C++, Go .
• Experience (non-internship) identifying industry security vulnerabilities, attack patterns, and remediation techniques.
• 8+ years Application Security or Development experience.

Technologies you may use

Java , Python , JavaScript , Scala , C/C++ , Go , command line tools , and service-oriented architectures ( microservices ) and web services.

Certifications listed for alignment include CCSP (Certified Cloud Security Professional), CEH (Certified Ethical Hacker), CFR (CyberSec First Responder), Cloud+ , CySA+ (CompTIA Cybersecurity Analyst), GCED (GIAC Certified Enterprise Defender), GICSP (Global Industrial Cyber Security Professional), and PenTest+ .

Preferred qualifications

• Experience with security in service-oriented architectures/microservices and web services .
• One or more: CCSP , CEH , CFR , Cloud+ , CySA+ , GCED , GICSP , or PenTest+ .

Benefits

• Sign-on payments and restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription)
• Basic Life & AD&D insurance
• Option for Supplemental life plans
• EAP
• Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Application deadline: Oct 5, 2026