Application Security Engineer, US Amazon Dedicated Cloud Security

Overview In this role you lead application security for a government-focused AI platform, embedding security into the software development lifecycle. You define acceptance criteria, scanning gates, and image-signing policies, while owning software supply-chain standards. You will collaborate with engineers, ISSOs, and testers to secure the pipeline delivering mission-relevant AI capabilities. You’ll work hands-on to scale security in a high-stakes, constrained environment and drive lasting improvements. This is a mission-driven opportunity to shape secure, automated delivery of mission-critical AI tooling. Compensation / Benefitshealth insurance (medical, dental, vision)401(k) matchingpaid time offparental leaveRSUs and sign-on paymentsflexible work hours ResponsibilitiesSecure CI/CD pipelines in collaboration with platform software teamsConduct security code reviews and drive remediation of identified vulnerabilitiesDefine application-security acceptance criteria, scanning gates, and image-signing policy for AI platformOwn software supply-chain assurance standards including artifact provenance and dependency validationEnsure platform builds implement and validate against security policiesCollaborate with engineers, ISSOs, and testers to integrate security across the development lifecycleCommunicate risk and design decisions in writing to technical and non-technical audiencesMentor other security engineers through design reviews and career guidanceDefine and refine scanning gates for container image pipelines and investigate supply-chain validation resultsPair with software engineers to harden CI/CD stages and promote reusable patterns Key requirementsBachelor's degree in Computer Science or a related field6+ years of experience in application security architecture, secure software engineering, security code reviews, security testing, or security infrastructureExperience with SAST/DAST, container/image scanning, and software supply-chain assuranceCurrent, active TS/SCI security clearance with PolygraphStrong communication to both technical and non-technical audiencesMentorship and guidance for junior engineersCross-functional collaboration with ISSOs and testersSAST/DASTcontainer/image scanningsoftware supply-chain assurance