AWS Proactive Security Engineer — Automate & Verify Fixes

Amazon; Washington (Washington County); Hybrid; USD 136,000 - 184,000; Full time

Job summary

Amazon Security is seeking a Security Engineer for AWS Proactive Security to automate verification and remediation of security issues across AWS services and features. You will review builder-proposed fixes, perform static analysis, and reproduce issues to ensure robust releases.

You will collaborate with in-house developers, write PoC code, and communicate findings clearly to drive improvements while maintaining a strong security posture for customers worldwide.

Qualifications

• 2+ years of web protocols, common security attacks, and remediation
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience scripting with Python, Perl, Bash or PowerShell

Responsibilities

• Automate the verification and remediation of security issues
• Manually audit the source code of web services and software authored in house by Amazon
• Write proof of concept code to demonstrate the severity of a potential security issue
• Provide clear communication on issues to developers that suggest and help to test the fix
• Partner with AWS developers to drive improvement in application security as a result of security review engagements
• Provide actionable long term risk mitigation guidance

Skills

2+ years of web protocols and security

security concepts and remediation

scripting: Python, Perl, Bash or Power

Education

Bachelor's degree in Engineering/CS

Tools

BurpSuite

Metasploit

IDA Pro

Job description

Amazon Security is seeking a Security Engineer for AWS Proactive Security to automate verification and remediation of security issues across AWS services and features. You will review builder-proposed fixes, perform static analysis, and reproduce issues to ensure robust releases.

You will collaborate with in-house developers, write PoC code, and communicate findings clearly to drive improvements while maintaining a strong security posture for customers worldwide.