Security Engineer – Compliance Penetration Testing (Remote)

Amazon; Town of Texas (WI); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Mental Health Support

Adoption and Surrogacy Reimbursement

Job summary

Amazon Stores Security is seeking a Security Engineer for Compliance Penetration Testing. You will perform independent or team-based penetration testing across Amazon's services, applications, and APIs, documenting findings and remediation with direct collaboration to owning teams.

You will communicate findings to software development teams, participate in building tooling, and balance short-term fixes with long-term security goals while maintaining customer trust.

Qualifications

• Bachelor's degree in STEM or 2+ years IT Security experience.
• 3+ years of hands-on application penetration testing across web apps, APIs, or cloud services.
• Experience identifying, exploiting, and documenting vulnerabilities; including auth, authorization, logic, and input validation.
• Experience writing penetration test reports and communicating findings to software teams.
• 2+ years of scripting or programming in Python, Go, Java, Ruby, or similar language.

Responsibilities

• Conduct high quality penetration tests independently or as part of a team.
• Create detailed engagement plans and thoroughly document findings, gaps, and remediation recommendations.
• Contribute to team tooling, automation, and improvements.
• Communicate with partner teams, service owners, Information Security and leadership to drive remediation.

Skills

Penetration testing

Report writing

Scripting

Cross-team collaboration

Technical communication

Education

Bachelor's degree in STEM

Tools

AWS

Job description

Amazon Stores Security is seeking a Security Engineer for Compliance Penetration Testing. You will perform independent or team-based penetration testing across Amazon's services, applications, and APIs, documenting findings and remediation with direct collaboration to owning teams.

You will communicate findings to software development teams, participate in building tooling, and balance short-term fixes with long-term security goals while maintaining customer trust.