Remote Security Engineer — Compliance Penetration Testing

Bazeta; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Amazon Security’s Compliance Penetration Testing team is seeking a Security Engineer to assess services, applications, and websites for vulnerabilities. You’ll communicate remediation options to technical and non-technical audiences and work with service owners and auditors.

The role emphasizes independent testing, collaboration, and contribution to testing tools, with opportunities to grow within a world-class security organization.

Qualifications

• 3+ years of experience in penetration testing or related security role
• Experience with penetration testing tools and techniques across network, web app, and cloud
• Programming or scripting experience (Python/Java/C++ etc.)
• Knowledge of security vulnerabilities and attack vectors (OWASP Top 10, SANS Top 25)
• Experience with risk assessment, threat modeling, and vulnerability management
• Bachelor’s degree in CS/InfoSec or equivalent experience

Responsibilities

• Perform compliance penetration tests against Amazon’s services, applications, and websites.
• Independently assess the security posture of Amazon’s services, applications, and websites.
• Document and report vulnerabilities and remediation options to owning teams and external auditors.
• Contribute to the development of the team’s testing tools and processes.

Skills

Penetration testing

Security assessment

Threat modeling

Risk assessment

Python/Java/C++

Communicating security findings

Education

Bachelor’s degree in Computer Science/Information Security or related field

Tools

Docker

Kubernetes

Job description

Amazon Security’s Compliance Penetration Testing team is seeking a Security Engineer to assess services, applications, and websites for vulnerabilities. You’ll communicate remediation options to technical and non-technical audiences and work with service owners and auditors.

The role emphasizes independent testing, collaboration, and contribution to testing tools, with opportunities to grow within a world-class security organization.