AppSec Security Engineer II: Penetration Testing Lead

Amazon; New York (NY); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

RSUs (restricted stock units)

Job summary

Amazon.com Services LLC's Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. In this role, you will conduct security reviews and penetration testing on Amazon’s services, applications, and websites, and report findings to internal teams.

You will work with Information Security teams and leadership, guiding remediation, and shaping security strategies across various business units, with emphasis on customer obsession and scalable security solutions.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience.
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Responsibilities

• Conducting high quality application security reviews and penetration tests independently, or as part of a team
• Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations
• Contributing to team tooling, innovation, and improvements
• Communicating and collaborating with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings

Skills

Programming languages

Scripting

Troubleshooting

Networking knowledge

Security knowledge

Education

Bachelor's degree in STEM / IT Security experience

Tools

AWS tools

Job description

Amazon.com Services LLC's Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. In this role, you will conduct security reviews and penetration testing on Amazon’s services, applications, and websites, and report findings to internal teams.

You will work with Information Security teams and leadership, guiding remediation, and shaping security strategies across various business units, with emphasis on customer obsession and scalable security solutions.