Security Engineer II, Stores Red Team

Job Description

Amazon’s Stores Security Red Team is seeking a Security Engineer to help keep Amazon's infrastructure secure for its customers by attacking Amazon’s services, infrastructure, processes, and controls.

Requirements

• Bachelor's degree in computer science or equivalent
• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 3+ years of experience on a Red Team

Responsibilities

• Conducting red team engagements throughout Amazon independently, or as part of a team.
• Creating detailed engagement plans, performing operations, and emulating adversary tactics, techniques, and procedures (TTPs).
• Thoroughly documenting timelines, attack paths, findings/gaps, and recommendations.
• Communicating and collaborating with partner teams, service owners, Amazon Security teams, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings.
• Performing manual examination of client systems, applications and networks to discover weaknesses, and thoroughly documenting high quality exploit chain/proof of concept scenarios/reports for customer consumption.
• Contributing to tooling, processes, documentation, and quality of red team operations.
• Helping to recruit and interview, and train/mentor/develop other Red Team engineers.

Benefits

• Medical, dental, and vision coverage (multiple plan options)
• Health savings and flexible spending accounts
• 24/7 Employee Assistance Program for mental health support
• 401(k) with company match and various investment choices
• Company-paid life/AD&D and disability insurance
• Restricted stock units (RSUs) for employee ownership
• Child care and elder care referrals, adoption assistance
• Paid maternity and parental leave (including Ramp Back)
• Paid time off (PTO) and company holidays
• Employee discount on Amazon.com products
• Career Choice program (95% tuition and textbook coverage)