Application Security Engineer, US Amazon Dedicated Cloud Security
Core
Lead application security for a U.S. Government AI Factory program by defining security acceptance criteria, scanning gates, and supply-chain assurance standards.
Role type
Senior Application Security Engineer (US Government)
Builds
Secure AI platform pipelines and software supply chain for U.S. Government customers
Domain
U.S. Government / AI / Cloud Security
Deliverable
production ML models | infrastructure
Required skills
Application security architecture, secure software engineering, security code reviews, security testing, SAST/DAST, container/image scanning, software supply-chain assurance
Preferred skills
CI/CD security in classified environments, supply-chain security frameworks, security certifications (CSSLP, OSCP)
Technologies
SAST, DAST, container scanning, image signing
Responsibilities
Partner with platform teams to secure CI/CD pipelines and conduct security code reviews; Define application-security acceptance criteria and scanning gates; Own software supply-chain assurance standards including artifact provenance and dependency validation; Collaborate with ISSOs and security testers to integrate security into the development lifecycle; Mentor security engineers through design reviews.
Seniority
Senior, hands-on IC