Security Engineer II, AppsSec Pen Test & Threat Modeling

Amazon; New York (NY); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

401(k) matching

Parental leave

Job summary

Amazon’s Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will attack Amazon’s services, applications, and websites to discover security issues and report them to internal technology teams.

You will work with Information Security teams, provide technical leadership, and influence senior leadership on remediation strategies while maintaining a strong customer-obsessed mindset.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Java, .Net or C++.
• 2+ years of scripting, programming, and security code review in a common language.
• 2+ years of troubleshooting, logs analysis, or automation using CLI tools.

Responsibilities

• Conduct high quality application security reviews and penetration tests, independently or in a team.
• Create detailed engagement plans and document findings, gaps and remediation recommendations.
• Contribute to team tooling, innovation, and improvements.
• Communicate with partner teams, service owners, Information Security, and leadership to drive remediation.

Skills

Python

Java

C++

Go

Ruby

Security testing

Education

Bachelor's degree in STEM

Tools

AWS

Job description

Amazon’s Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will attack Amazon’s services, applications, and websites to discover security issues and report them to internal technology teams.

You will work with Information Security teams, provide technical leadership, and influence senior leadership on remediation strategies while maintaining a strong customer-obsessed mindset.