Remote Network Security Penetration Tester

Socket.dev; United States; Remote; USD 159,000 - 202,000; Full time

Job summary

Amazon is seeking a Security Engineer for the AppSTAR Network Security (NetSec) team to perform network penetration testing across fulfillment networks and AWS-based infrastructure. You will lead engagement planning, document findings, and mentor teammates, traveling up to 15% for on-site assessments across North America.

You will collaborate with security, network, and service teams to drive remediation, develop tooling, and shape security strategy while maintaining a strong customer focus and

Qualifications

• 3+ years of threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience.
• 3+ years of scripting, programming, and security code review in a non-internship context.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP.
• Experience applying threat modeling or other risk identification techniques or equivalent.
• 3+ years of experience in network penetration testing, infrastructure security assessment, or related offensive security role.

Responsibilities

• Conduct high-quality network penetration tests as part of a team against Amazon fulfillment networks, and cloud (AWS)-based and non-cloud-based network infrastructure supporting Amazon Stores’ services.
• Devising engagement test plans and thoroughly documenting findings, gaps, and remediation recommendations in written reports for both technical and leadership audiences.
• Performing remote and on-site network assessments at Amazon facilities (up to approximately 15% travel), including physical network reconnaissance, VLAN enumeration, and lateral movement.
• Contributing to team tooling, automation, and methodology improvements that increase the efficiency and coverage of network security assessments.
• Communicating and collaborating with partner teams, service owners, and network engineering to influence and prioritize the resolution of discovered security findings.
• Mentoring junior team members and contributing to knowledge-sharing through peer review, training, and documentation of tradecraft.

Skills

Threat modeling

Secure coding

Identity management

Software development

Cryptography

System administration

Network security

Network penetration testing

Education

Bachelor's degree in computer science or equivalent

Tools

Python

Java

C++

AWS

OSCP

GPEN

OSEP

Job description

Amazon is seeking a Security Engineer for the AppSTAR Network Security (NetSec) team to perform network penetration testing across fulfillment networks and AWS-based infrastructure. You will lead engagement planning, document findings, and mentor teammates, traveling up to 15% for on-site assessments across North America.

You will collaborate with security, network, and service teams to drive remediation, develop tooling, and shape security strategy while maintaining a strong customer focus and