Mobile App Security Engineer - Pen Testing & Threat Analysis

Socket.dev

Town of Texas (WI)

Hybrid

USD 159,000 - 202,000

Full time

9 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Amazon’s Stores Application Security Team is seeking a Mobile Security Engineer to help keep Amazon secure for its customers. In this role, you will attack Amazon’s services and mobile applications to discover security issues and report them to our internal technology teams.

This position will provide you with challenging opportunities, both technologically and as a leader, and will also be a great deal of fun if hacking Amazon alongside a team of highly skilled individuals sounds exciting to

Qualifications

Bachelor's degree in computer science or equivalent.
3+ years of penetration testing or offensive security experience.
3+ years of client-side application security experience including reverse engineering and assessments.
3+ years of security engineering practices including web security, auth, cryptography, automation, and other disciplines.
3+ years of dynamic/manual code auditing to identify issues.
3+ years of experience with Python, Ruby, C/C++, Java, or .NET.
Experience with threat modeling, design reviews, or threat analysis.
Proficiency with binary analysis tools (Ghidra, IDA Pro, Radare2, Hopper, Jadx).
Experience with client-side instrumentation and dynamic testing tools (Frida, Objection, LLDB, Burp Suite).

Responsibilities

Conduct high quality application penetration tests independently or as part of a team.
Create detailed engagement plans and document findings, gaps, and remediation recommendations.
Contribute to team tooling, innovation, and improvements.
Communicate and collaborate with partner teams, service owners, Information Security, and leadership to influence remediation.