AWS Security Penetration Engineer

Amazon; Town of Texas (WI); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Security is seeking a Security Engineer I to perform adversarial testing of AWS production services, applying established team methodologies and building on GenAI security outputs. You will assess, innovate, and extend testing practices while collaborating with senior engineers to grow expertise in cloud security and automation.

In this role, you will write proof-of-concept code demonstrating impact, own your tickets, and help expand runbooks and tooling for efficiency.

Qualifications

• Knowledge of scripting languages (e.g., Python, Ruby, Perl).
• Knowledge of security fundamentals such as vulnerability classes, threat modeling, secure coding.
• Ability to communicate security risk for low complexity problems in written and verbal form.

Responsibilities

• Perform adversarial testing of AWS production services on scoped work using established methodologies.
• Build on GenAI security tool findings and automation to demonstrate exploits.
• Manually audit in-house source code focusing on defined components and known risk areas.
• Elevate issues crossing service boundaries to senior engineers.
• Write proof-of-concept code demonstrating provable impact.
• Explain findings clearly and help validate fixes in production.
• Own and drive tickets to validated resolution.
• Contribute to runbooks and automation to reduce manual work.
• Act on signals to set team targets and apply judgment on autonomy vs guidance.

Skills

Python

Security fundamentals

Communication skills

Education

Bachelor's degree in Engineering/CS

Tools

GenAI tooling

Automation tooling

Web security tooling

Job description

Amazon Security is seeking a Security Engineer I to perform adversarial testing of AWS production services, applying established team methodologies and building on GenAI security outputs. You will assess, innovate, and extend testing practices while collaborating with senior engineers to grow expertise in cloud security and automation.

In this role, you will write proof-of-concept code demonstrating impact, own your tickets, and help expand runbooks and tooling for efficiency.