Amazon.com Inc logo

Application Security Engineer, US Amazon Dedicated Cloud Security

Amazon.com Inc

  • Herndon, VA
  • 3 days ago

    Highlights

    We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Collaborate directly with software engineers, Information System Security Officers (ISSOs), and security testers to ensure security is integrated throughout the development lifecycle.

    Numbers & Facts

    LocationHerndon, VA
    IndustryRetail
    Company Size10,000 employees or more
    Year Founded1994
    Websitehttp://Amazon.com/militaryroles

    Description

    Amazon"s Security team is looking for a Senior Application Security Engineer to lead application security for a U.S. Government program building a purpose-built AI Factory. We are a hands-on team that raises the security bar by baking it into how software is built, not bolting it on afterward. In this role you define the application-security acceptance criteria, scanning gates, and image-signing policy, own software supply-chain assurance standards, and ensure the platform build implements and validates against them. You will work in the trenches with software engineers, ISSOs, and security testers to secure the pipeline that delivers AI capability to the mission. If you get excited about the challenge of securing software at scale in an environment with none of the usual conveniences, this role is for you. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph.

    Key job responsibilities

    Partner with platform software teams to secure CI/CD pipelines, conduct security code reviews, and drive remediation of identified vulnerabilities.

    Define application-security acceptance criteria, scanning gates, and image-signing policy for an AI platform serving U.S. Government customers.

    Own software supply-chain assurance standards - including artifact provenance, dependency validation, and image-signing policy - and ensure the platform build implements and validates against them.

    Collaborate directly with software engineers, Information System Security Officers (ISSOs), and security testers to ensure security is integrated throughout the development lifecycle.

    Communicate security risk and design decisions in writing to both technical and non-technical audiences, and mentor other security engineers through design reviews and career guidance.

    A day in the life

    You might start your morning defining a new scanning gate for a container image pipeline, working through acceptance criteria with the platform build team. Later you investigate a supply-chain validation result that flagged an unexpected dependency, then partner with an ISSO to confirm the remediation path meets compliance requirements. You close out the day pairing with a software engineer to harden a CI/CD stage, sharing patterns that the broader team can reuse.

    About the team

    Our team sits within Amazon"s Security organization and supports U.S. Government customers by ensuring that AI workloads are built on a secure software foundation. We work shoulder-to-shoulder with platform software engineers, ISSOs, and security testers to integrate security into every phase of the build. We are investing in supply-chain assurance, automated scanning infrastructure, and secure delivery pipelines. If you want to solve hard problems that directly protect mission-critical capabilities, this is the team for you.

    Diverse Experiences

    Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

    Why Amazon Security?

    At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

    Inclusive Team Culture

    In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

    Training & Career Growth

    We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

    Work/Life Balance

    We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.

    About Company

    At Amazon, we don’t wait for the next big idea to present itself. We envision the shape of impossible things and then we boldly make them reality. So far, this mindset has helped us achieve some incredible things. Let’s build new systems, challenge the status quo, and design the world we want to live in. We believe the work you do here will be the best work of your life.

    Wherever you are in your career exploration, Amazon likely has an opportunity for you. Our research scientists and engineers shape the future of natural language understanding with Alexa. Fulfillment center associates around the globe send customer orders from our warehouses to doorsteps. Product managers set feature requirements, strategy, and marketing messages for brand new customer experiences. And as we grow, we’ll add jobs that haven’t been invented yet.

    It’s Always Day 1
    At Amazon, it’s always “Day 1.” Now, what does this mean and why does it matter? It means that our approach remains the same as it was on Amazon’s very first day – to make smart, fast decisions, stay nimble, invent, and stay focused on delighting our customers. In our 2016 shareholder letter, Amazon CEO Jeff Bezos shared his thoughts on how to keep up a Day 1 company mindset. “Staying in Day 1 requires you to experiment patiently, accept failures, plant seeds, protect saplings, and double down when you see customer delight,” he wrote. “A customer-obsessed culture best creates the conditions where all of that can happen.” You can read the full letter here

    Our Leadership Principles
    Our Leadership Principles help us keep a Day 1 mentality. They aren’t just a pretty inspirational wall hanging. Amazonians use them, every day, whether they’re discussing ideas for new projects, deciding on the best solution for a customer’s problem, or interviewing candidates. To read through our Leadership Principles from Customer Obsession to Bias for Action, visit https://www.amazon.jobs/principles

    Similar Jobs