Amazon Sr Application Security Engineer EMEA 

Spain, Catalonia, Barcelona 

426264027

prioritizing risks to guide their partners towards secure solutions.
Key job responsibilities
- Creating, updating, and maintaining threat models for a wide variety of software projects.
- Manual and Automated Secure Code Review, primarily in Java, Python and Javascript.
- Development of security automation tools.
- Adversarial security analysis using automation to augment manual effort.- Security architecture and design guidance.
- Seek out, develop, and advocate for new technology to identify and mitigate complex risks.
- Effectively navigate novel situations and problems that do not have a defined solution.
Diverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance

- BS in Computer Science, Information Security, Extensive hands on experience and expertise in areas such as application security, offensive security and/or systems security.
- Understanding of threat modeling, manual source code review, security vulnerabilities, attacker exploit techniques, and methods for their remediation.
- Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences.
- Ability to drive multiple technically complex security reviews together while remaining effective at providing security guidance to stakeholders and - ability to work with a high degree of autonomy.