Remote Network Penetration Engineer

Amazon; United States; On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon seeks a Security Engineer for its AppSTAR Network Security (NetSec) team to perform penetration tests on Amazon Stores’ network infrastructure, including FC site networks and cloud-based environments. You will document findings, develop test plans, and travel up to 15% for on-site assessments across North America.

Expect collaboration with security teams, hands-on testing, and opportunities to lead tooling development and knowledge sharing.

Qualifications

• 3+ years of threat modeling and security experience.
• 3+ years of scripting, programming, and security code review.
• Knowledge of network security vulnerabilities and remediation techniques.
• Knowledge of HTTP(S), DNS, TCP/IP networking.
• 3+ years of network penetration testing or related offensive security role.
• Bachelor’s degree in computer science or equivalent.
• Relevant industry certifications such as OSCP, GPEN, OSEP (preferred).

Responsibilities

• Conduct high-quality network penetration tests against Amazon networks and cloud-based infrastructure.
• Document findings, gaps, and remediation recommendations for technical and leadership audiences.
• Perform remote and on-site assessments with up to 15% travel.
• Contribute to team tooling, automation, and methodology improvements.
• Communicate with partner teams to influence remediation of findings.
• Mentor junior team members and share knowledge.

Skills

Threat modeling

Secure coding

Identity management

Software development

Cryptography

System administration

Network security

Scripting

Programming

Security code review

HTTP(S) DNS TCP/IP

Penetration testing

Education

Bachelor's degree in CS or related field

Tools

AWS experience

Python/Java/C++

OSCP GPEN OSEP

Job description

Amazon seeks a Security Engineer for its AppSTAR Network Security (NetSec) team to perform penetration tests on Amazon Stores’ network infrastructure, including FC site networks and cloud-based environments. You will document findings, develop test plans, and travel up to 15% for on-site assessments across North America.

Expect collaboration with security teams, hands-on testing, and opportunities to lead tooling development and knowledge sharing.