Mobile App Security Engineer – Pen Testing & Secure Apps

Amazon; United States; On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Stores seeks a Mobile Security Engineer to test and secure its mobile apps and services, reporting findings to internal teams. You will lead penetration testing efforts and help shape security tooling and processes across teams.

You will work with Information Security and senior leaders, balancing short-term fixes with long-term security goals, while maintaining customer-obsessed focus on protecting Amazon and its customers.

Qualifications

• Bachelor's degree in CS or equivalent required.
• 3+ years in penetration testing or offensive security.
• 3+ years in client-side app security and assessments.
• 3+ years in security engineering practices (web security, auth, crypto, automation).
• 3+ years with dynamic/manual code auditing for issues.
• 3+ years with languages such as Python, Java, C/C++, .NET.
• Experience with threat modeling and design reviews.
• Familiar with binary analysis tools and dynamic testing.

Responsibilities

• Conduct high-quality application penetration tests solo or in teams.
• Create engagement plans and document findings, gaps, remediation suggestions.
• Contribute to tooling, innovation, and improvements.
• Collaborate with partner teams, Information Security, and leadership to drive remediation.

Skills

Penetration testing

Client-side security

Security engineering

Code auditing

Python

Java

C/C++

Threat modeling

Binary analysis

Education

Bachelor's degree in computer science or equivalent

Tools

Ghidra

IDA Pro

Radare2

Hopper

Jadx

Frida

Objection

LLDB

Burp Suite

Job description

Amazon Stores seeks a Mobile Security Engineer to test and secure its mobile apps and services, reporting findings to internal teams. You will lead penetration testing efforts and help shape security tooling and processes across teams.

You will work with Information Security and senior leaders, balancing short-term fixes with long-term security goals, while maintaining customer-obsessed focus on protecting Amazon and its customers.