Security Engineer II – Application Security & Pen Testing

Amazon; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon’s Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will perform security assessments on services, applications, and websites, reporting findings to internal teams and driving remediation across the organization.

You will work with Information Security and various business units, balancing short-term fixes with long-term security goals, while upholding a customer-obsessed mindset and leading through ambiguity in a fast-paced environment.

Qualifications

• 3+ years programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language experience.
• 2+ years of scripting, programming, and security code review experience.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools.
• Bachelor's degree in a STEM field or 2+ years of IT Security experience.
• Knowledge of HTTP, DNS and TCP/IP networking protocols and security vulnerabilities.

Responsibilities

• Conduct high quality application security reviews and penetration tests independently or as part of a team.
• Create detailed engagement plans and document findings, gaps, and remediation recommendations.
• Contribute to team tooling, innovation, and improvements.
• Communicate with partner teams, service owners, Information Security, and leaders to influence and drive remediation of findings.

Skills

Programming languages

Networking knowledge

Security code review

Troubleshooting

CLI tooling

Education

Bachelor's in STEM or IT Security experience

Tools

AWS

Job description

Amazon’s Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will perform security assessments on services, applications, and websites, reporting findings to internal teams and driving remediation across the organization.

You will work with Information Security and various business units, balancing short-term fixes with long-term security goals, while upholding a customer-obsessed mindset and leading through ambiguity in a fast-paced environment.