Security Engineer - Compliance Penetration Testing

Amazon; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com Services LLC is seeking a Security Engineer for the CPT team to perform hands-on penetration testing of Amazon's services, applications, and websites. You will create engagement plans, document findings, and work with owning teams to remediate issues in alignment with regulatory commitments.

You will engage with partner teams and senior leadership to prioritize risks, drive remediation, and help improve security tooling and processes across the organization.

Qualifications

• Hands-on application penetration testing across web apps, APIs, or cloud services.
• Experience writing detailed penetration test reports and remediation guidance to software development teams.
• 2+ years of scripting in Python, Go, Java, or Ruby (non-internship).

Responsibilities

• Conducting high quality penetration tests independently, or as part of a team.
• Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations.
• Contributing to team tooling, innovation, and improvements.
• Communicating and collaborating with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings.

Skills

Penetration testing

Scripting (Python/Go/Java)

Communication of findings

AWS

Regulatory compliance awareness

Education

Bachelor's degree in STEM

Tools

AWS

Security tooling

Job description

Amazon.com Services LLC is seeking a Security Engineer for the CPT team to perform hands-on penetration testing of Amazon's services, applications, and websites. You will create engagement plans, document findings, and work with owning teams to remediate issues in alignment with regulatory commitments.

You will engage with partner teams and senior leadership to prioritize risks, drive remediation, and help improve security tooling and processes across the organization.