AppSec Security Engineer II — Pen Testing & Lead

Amazon.com Services LLC; United States; On-site; USD 130,000 - 190,000; Full time

Job summary

Amazon.com Services LLC Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will assess and protect Amazon's services, applications, and websites by identifying security issues and reporting them to internal teams.

The role challenges you technically and as a leader, with a strong emphasis on customer obsession and secure-by-design thinking. You will work with Information Security and business teams to understand how Amazon is built and operated,

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .NET or C++.
• 2+ years of scripting, programming, and security code review in a common language.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating tasks with command line tools.
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years IT security experience.
• Knowledge of HTTP, DNS and TCP/IP networking.
• Knowledge of security vulnerabilities and remediation techniques.

Responsibilities

• Conducting high quality application security reviews and penetration tests independently, or as part of a team
• Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations
• Contributing to team tooling, innovation, and improvements
• Communicating and collaborating with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings

Skills

Python

Ruby

Go

Swift

Java

.NET

C++

Education

Bachelor's degree in STEM

Job description

Amazon.com Services LLC Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will assess and protect Amazon's services, applications, and websites by identifying security issues and reporting them to internal teams.

The role challenges you technically and as a leader, with a strong emphasis on customer obsession and secure-by-design thinking. You will work with Information Security and business teams to understand how Amazon is built and operated,