Amazon Application Security Engineer SDO AppSec EMEA 

United Kingdom, England, London 

353568573

Key job responsibilities
- Creating, updating, and maintaining threat models for a wide variety of software projects.
- Manual and Automated Secure Code Review, primarily in Java, Python and Javascript.
- Development of security automation tools
- Adversarial security analysis using tools to augment manual effort.- Security architecture and design guidance.
- Independently solve security problems that require novel methods or approaches.Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance

- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience with programming languages such as Python, Java, C++
- Bachelor's degree in computer science or equivalent, or equivalent years of engineering experience.

- Information security professional certification
- Experience with AWS products and services
- Knowledge of penetration testing and the development of exploits or equivalent