Security Engineer II, Stores Security Pen Test

Job Description

Amazon’s Stores Pentest Team is seeking a Security Engineer to help keep Amazon secure for its customers. The role involves attacking Amazon’s services, applications, and websites to discover security issues and report them to internal technology teams.

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• Bachelor's degree in computer science or equivalent
• 3+ years of any combination of threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• 3+ years of experience in a penetration testing or similar offensive security role

Responsibilities

• Conducting high quality application penetration tests independently, or as part of a team
• Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations
• Contributing to team tooling, innovation, and improvements
• Communicating and collaborating with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings

Benefits

• Medical, dental, and vision coverage (multiple plan options)
• Health savings and flexible spending accounts
• 24/7 Employee Assistance Program for mental health support
• 401(k) with company match and various investment choices
• Company-paid life/AD&D and disability insurance
• Restricted stock units (RSUs) for employee ownership
• Child care and elder care referrals, adoption assistance
• Paid maternity and parental leave (including Ramp Back)
• Paid time off (PTO) and company holidays
• Employee discount on Amazon.com products
• Career Choice program (95% tuition and textbook coverage)