AWS Proactive Security Engineer

Amazon; Washington (District of Columbia); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Flexible Spending Accounts

Adoption and Surrogacy Reimbursement

Job summary

Amazon is actively seeking a Security Engineer for AWS Proactive Security to automate verification and remediation of security issues while manually auditing in-house web services. You will write PoCs to demonstrate issues, clearly communicate fixes to developers, and collaborate with AWS teams to improve application security.

The role also involves providing long-term risk mitigation guidance. As part of pre-launch security testing, you will review builder fixes, access development environments

Qualifications

• 2+ years of web protocols, common security attacks, and remediation experience.
• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
• Experience scripting with Python, Perl, Bash or PowerShell.

Responsibilities

• Automate the verification and remediation of security issues
• Manually audit the source code of web services and software authored in house by Amazon
• Write proof of concept code to demonstrate the severity of a potential security issue
• Provide clear communication on issues to developers that suggest and help to test the fix
• Partner with AWS developers to drive improvement in application security as a result of security review engagements
• Provide actionable long term risk mitigation guidance

Skills

Web protocols & attacks

Scripting: Python/Perl/Bash/PowerShell

Education

Bachelor's degree in Engineering/CS/related field

Tools

BurpSuite

Metasploit

IDA Pro

AWS services

Job description

Amazon is actively seeking a Security Engineer for AWS Proactive Security to automate verification and remediation of security issues while manually auditing in-house web services. You will write PoCs to demonstrate issues, clearly communicate fixes to developers, and collaborate with AWS teams to improve application security.

The role also involves providing long-term risk mitigation guidance. As part of pre-launch security testing, you will review builder fixes, access development environments