Anyone working in Non-AWS AppSec?

A friend is about to graduate from NYC and is targeting for job at Amazon in any non-cloud AppSec team. I don't know much about the field and couldn't find anyone else who fits the role. Anyone here interested in helping?