Security Engineer II, Offensive Security Penetration Testing

Job Description

Amazon’s Information Security Penetration Testing Team is seeking a Security Engineer to help keep Amazon secure for its customers. The Security Engineer will attack Amazon’s services, applications, and websites to discover security issues and report them to internal technology teams.

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• Bachelor's degree in computer science or equivalent
• 3+ years of any combination of threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• 3+ years of experience in a penetration testing or similar offensive security role

Responsibilities

• Conducting high quality application penetration tests independently, or as part of a team
• Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations
• Contributing to team tooling, innovation, and process improvements
• Communicating and collaborating with partner security teams, service owners, and senior leadership to influence and prioritize the resolution of discovered security findings

Benefits

• Medical, dental, and vision coverage (multiple plan options)
• Health savings and flexible spending accounts
• 24/7 Employee Assistance Program for mental health support
• 401(k) with company match and various investment choices
• Company-paid life/AD&D and disability insurance
• Restricted stock units (RSUs) for employee ownership
• Child care and elder care referrals, adoption assistance
• Paid maternity and parental leave (including Ramp Back)
• Paid time off (PTO) and company holidays
• Employee discount on Amazon.com products
• Career Choice program (95% tuition and textbook coverage)