Application Security Engineer

Salary: £42,000 - 77,000 per year

Requirements:

• 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .NET, C++, or a similar object-oriented language
• 2+ years of scripting, programming, and security code review experience in a common programming language
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command-line tools experience
• Bachelors degree in Computer Science or equivalent experience
• Bachelors degree in a STEM field or experience in IT Security
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques
• Experience in any combination of application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of one or more domains such as web application development, penetration testing, mobile security, cryptography, public key infrastructure, forensic security, IP security, SSL/TLS, computer viruses and malware, network security, trusted security, trusted execution, threat intelligence, IoT security implications, or authentication
• 2+ years of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security experience
• Experience with AWS products and services
• Experience with programming languages such as Python, Java, or C++
• Experience performing security activities across one or more phases of the software development lifecycle
• Knowledge of security technology and concepts such as authentication, authorization, single sign-on, and cryptography
• Experience working directly with security and engineering teams
• Knowledge of network and web-related protocols such as TCP/IP, UDP, IPSEC, HTTP, or equivalent
• Experience with web services and related technologies
• Experience in more than one major programming language and at least one scripting language

Responsibilities:

• Perform application security reviews
• Conduct penetration testing
• Support projects and research work as needed
• Provide security training and outreach to internal development teams
• Create security guidance documentation
• Develop security tools
• Deliver security metrics and improvements
• Assist with recruiting activities and administrative work
• Analyze the security of applications and services
• Discover and address security issues
• Build security automation
• React quickly to new threat scenarios
• Develop elegant solutions to complex business problems using appropriate technologies and security engineering best practices
• Participate in planning of the AWS IT Security teams work and seek process improvements

Technologies:

• AI
• AWS
• Cloud
• Cryptography
• Hardware
• HTTP
• IoT
• Support
• Java
• Mobile
• Network
• Python
• React
• Ruby
• Security
• Swift
• TCP/IP
• Web
• ASP.NET
• Perl

More:

We are AWS Security, part of Amazon Web Services, and we help protect the AWS cloud computing environment and our customers at massive scale. Since 2006, we have enabled customers to bring great ideas to life with flexible access to compute, storage, security, and other services from around the globe. We work across cloud services, IoT, identity and access management, mobile devices, virtualization, and custom hardware, and our collaborative team is committed to each members growth. In this role, you will have opportunities to learn from and be mentored by experts building and securing cutting-edge services. We value diverse experiences, inclusive teamwork, training and career growth, and work/life balance, with flexible work hours and arrangements that support our people.

last updated 34 week of 2026