AppSec Security Engineer II — Penetration Testing Lead

Amazon; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amazon’s Stores AppSec Team seeks a Security Engineer to attack Amazon’s services, applications, and websites to identify security issues and report them to internal teams. You will work with Information Security and leadership to balance short-term fixes with long-term security goals, while maintaining customer trust.

In this role you will conduct independent security reviews, develop engagement plans, and contribute to tooling and process improvements.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Responsibilities

• Conduct high quality application security reviews and penetration tests independently, or as part of a team
• Create detailed engagement plans and thoroughly document findings, gaps, and remediation recommendations
• Contribute to team tooling, innovation, and improvements
• Communicate and collaborate with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings

Skills

Python

Security testing

Networking

Education

Bachelor's degree in STEM

Tools

AWS

Command line tools

Job description

Amazon’s Stores AppSec Team seeks a Security Engineer to attack Amazon’s services, applications, and websites to identify security issues and report them to internal teams. You will work with Information Security and leadership to balance short-term fixes with long-term security goals, while maintaining customer trust.

In this role you will conduct independent security reviews, develop engagement plans, and contribute to tooling and process improvements.