Sr AWS Application Security Engineer, ADC AppSec
Amazon · Seattle, WA
$178,400–$226,700from the description
Jul 15, 2026
Seattle, WA
Jul 21, 2026
What this job asks for AI summary
A senior individual-contributor role within AWS Security focused on reviewing the security of internal applications and services, conducting threat modeling of AWS offerings, building security tooling and automation, and providing guidance and training to internal development teams. The position suits an experienced application security engineer comfortable spanning secure design, vulnerability analysis, and some software development, with an expectation of mentoring less senior engineers.
Senior level · 5+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $152,225 (middle half $125,286–$177,673). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The role sits at the intersection of application security engineering and software development (security tool development, automation, code review). 15-1212 is chosen as primary because the dominant day-to-day work is security analysis, threat modeling, and vulnerability remediation; 15-1252 is a credible runner-up given the explicit security tool/automation development responsibilities.
The Basic Qualifications list a combined '5+ years of any combination of' threat modeling, secure coding, identity management, cryptography, system administration, and network security — these are treated as a single pooled gate rather than independent per-skill year requirements. The overall years minimum is set to 5 to reflect this gate.
The degree requirement states 'BS degree in computer science or equivalent, OR 4+ years of technical work experience', making the degree substitutable with experience; the degree requirement is therefore set to None.
The posting notes 'A clearance is not required for this position' explicitly, so the clearance requirement is None, even though a background check is mentioned.
Programming language experience (C++/Java and Perl/Python) appears only under Preferred Qualifications.
Networking protocols (HTTP/HTTPS, DNS, TCP/IP) and microservices/SOA experience appear only under Preferred Qualifications.
The compensation range ($178,400–$226,700/year) is listed for the Arlington, VA location specifically; actual pay may vary by location.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): identity management and authentication.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.