AWS Proactive Security Engineer: PenTest & Automation

Amazon; Northern (KY); Hybrid; USD 136,000 - 184,000; Full time

Job summary

Amazon is seeking a Security Engineer for AWS Proactive Security to join a team that evaluates services and features to uphold a high security bar across the AWS landscape. You will automate verification, perform manual audits of in-house code, and write PoCs to demonstrate the impact of potential issues.

You’ll collaborate with developers to drive fixes, provide long-term risk mitigation guidance, and reproduce attacker techniques to validate remediation across customer environments.

Qualifications

• 2+ years of web protocols, common security attacks, and remediation experience
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploit development
• Experience scripting with Python, Perl, Bash or PowerShell
• Experience with AWS services or other cloud offerings
• Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell)
• Experience using standard security assessment and penetration testing tools such as BurpSuite, Metasploit, and IDA Pro

Responsibilities

• Automate the verification and remediation of security issues
• Manually audit the source code of web services and software authored in house by Amazon
• Write proof of concept code to demonstrate the severity of a potential security issue
• Provide clear communication on issues to developers that suggest and help to test the fix
• Partner with AWS developers to drive improvement in application security as a result of security review engagements
• Provide actionable long term risk mitigation guidance

Skills

Web protocols

Security vulnerabilities

Scripting: Python/PowerShell

AWS experience

Programming languages

Penetration testing tools

Education

Bachelor's degree in Engineering/Computer Science/related field

Tools

BurpSuite

Metasploit

IDA Pro

Job description

Amazon is seeking a Security Engineer for AWS Proactive Security to join a team that evaluates services and features to uphold a high security bar across the AWS landscape. You will automate verification, perform manual audits of in-house code, and write PoCs to demonstrate the impact of potential issues.

You’ll collaborate with developers to drive fixes, provide long-term risk mitigation guidance, and reproduce attacker techniques to validate remediation across customer environments.