Lead Security Testing Engineer - AI-augmented, AWS

Amazon Web Services (AWS); Milano; In loco; EUR 57.000 - 69.000; Tempo pieno

Descrizione del lavoro

AWS EMEA SARL (Italy Branch) is seeking a Security Engineer to join Point-in-Time Security Testing. You will own complex engagements end to end, building reusable harnesses and testing agentic AI systems for secure outcomes.

You will work with developers, AppSec engineers, and Blue teams, delivering clear results, documenting risk, and driving remediation within the development lifecycle for launches and architectures where security expertise matters most.

Competenze

• Offensive testing of web applications and services, including code review.
• Scripting to solve problems and deploy code in an enterprise environment.
• Suggest secure design architecture, including cryptography and infrastructure.
• Demonstrate a propensity to learn new ideas quickly with data-driven conclusions.
• Experience with AWS technologies and services (e.g. S3, Lambda, EC2, KMS, IAM).

Mansioni

• Lead complex security testing engagements end to end across microservice architectures.
• Perform penetration testing and AI-augmented source code review of complex AWS software.
• Document conclusions or ruled-out attack paths with evidence.
• Challenge scope documents and adapt test paths as needed.
• Trace attack paths and demonstrate compound risk across components.

Conoscenze

Security testing

Penetration testing

Code review

Threat modeling

Python scripting

AWS knowledge

Adversary mindset

Formazione

Bachelor's degree in Computer Science, Cybersecurity, or a related field

Strumenti

boto3

Descrizione del lavoro

AWS EMEA SARL (Italy Branch) is seeking a Security Engineer to join Point-in-Time Security Testing. You will own complex engagements end to end, building reusable harnesses and testing agentic AI systems for secure outcomes.

You will work with developers, AppSec engineers, and Blue teams, delivering clear results, documenting risk, and driving remediation within the development lifecycle for launches and architectures where security expertise matters most.