Security Engineer, AWS Proactive Security

Cybersecurity Jobs; Miami (FL); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance (medical, dental, ...

401(k) matching

Paid time off

Parental leave

Sign-on payments

Restricted stock units (RSUs)

Job summary

Amazon Security is seeking a pre-launch Security Engineer to support a testing team evaluating AWS services and features before release. You review and validate builder-proposed security fixes, reproduce findings in customer-like environments, and raise security standards through automation and deeper analysis.

Onsite in Florida, you will audit products and services, contribute to security reviews, and work with developers to improve application security and remediation efforts for cloud

Qualifications

• 2+ years of non-internship security experience with web protocols and remediation.
• Bachelor’s degree in Engineering, CS, or related field.
• Knowledge of security vulnerabilities and remediation techniques including pentesting.
• Experience scripting with Python, Perl, Bash, or PowerShell.

Responsibilities

• Automate verification and remediation of security issues.
• Manually audit source code for web services and AWS software.
• Write proof of concept code to demonstrate severity of issues.
• Communicate clearly with developers on issues and test proposed fixes.
• Partner with AWS developers to improve application security based on findings.
• Provide actionable long term risk mitigation guidance after security reviews.
• Perform static code analysis and dynamic reproduction to validate fixes.
• Support automated tooling to verify security fixes related to penetration testing.

Skills

2+ years of security experience

Scripting in Python/Perl/Bash/PowerShe

Education

Bachelor’s degree in Engineering/CS or related field

Tools

Python

Perl

Bash

PowerShell

BurpSuite

Metasploit

IDA Pro

AWS

Job description

Amazon Security is seeking a pre-launch Security Engineer to support a testing team evaluating AWS services and features before release. In this role, you review and validate builder-proposed security fixes, reproduce security findings across customer-like environments, and help raise the security bar through automation and deeper analysis.

Working onsite in Florida, you will contribute to the team’s responsibility for manual assessment of products, services, and software released by AWS. The role is paid USD 136,000 - 184,000 per year, and the minimum experience requirement is 2+ years.

What you’ll do

• Automate the verification and remediation of security issues
• Manually audit source code for web services and Amazon-authored software
• Write proof of concept code to demonstrate the severity of potential security issues
• Communicate clearly with developers on issues and support testing of proposed fixes
• Partner with AWS developers to improve application security based on security review findings
• Provide actionable long term risk mitigation guidance after security reviews
• Perform static code analysis and dynamic reproduction to validate whether fixes are sufficient
• Support and build automated tooling (for example, fuzzers, scanners, analyzers) to verify security fixes related to penetration testing

Requirements

• 2+ years of non-internship experience with web protocols, common security attacks, and remediation
• Bachelor’s degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent experience
• Experience scripting with Python, Perl, Bash, or PowerShell

Tools and technologies

• Python, Perl, Bash, PowerShell
• BurpSuite, Metasploit, IDA Pro
• AWS

Benefits

• Health insurance (medical, dental, vision, prescription; Basic Life and AD&D insurance; and options for Supplemental life plans; EAP; Mental Health Support; Medical Advice Line; Flexible Spending Accounts; Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

Preferred qualifications

• Experience with AWS services or other cloud offerings
• Experience coding or scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell)
• Experience using security assessment and penetration testing tools such as BurpSuite, Metasploit, and IDA Pro

About the team

The organization emphasizes diverse experiences and encourages applications even if you do not meet every qualification listed in the job description. Amazon Security focuses on maintaining a high security bar across Amazon’s products and services and offers opportunities to build experience across a wide variety of areas, including cloud and other business domains.

Inclusive team culture, ongoing learning and DEI events, and training and career growth are part of the team’s approach. The company also highlights work-life harmony, including flexible work hours and arrangements.