Security Engineer II, Stores AppSec — Pen Test Lead

Amazon; New York (NY); On-site; USD 159,000 - 213,000; Full time

Benefits offered by this job

Health insurance

RSUs and sign-on payments

Paid time off

Parental leave

Job summary

Amazon’s Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will attack Amazon’s services, applications, and websites to discover security issues and report them to internal teams.

This role offers challenging opportunities and leadership potential within a collaborative team. You will work with Information Security across business verticals, gaining deep knowledge of Amazon's architecture while shaping security trade-offs to protect customers.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language.
• 2+ years of scripting, programming, and security code review in a non-internship role.
• 2+ years troubleshooting systems issues, analyzing logs, or automating tasks via command line.

Responsibilities

• Conduct high quality application security reviews and penetration tests independently or with a team.
• Create detailed engagement plans and document findings, gaps, and remediation recommendations.
• Contribute to team tooling, innovation, and improvements.
• Communicate with partner teams, service owners, Information Security, and senior leadership to drive remediation of findings.

Skills

Python

Java

C++

Go

Ruby

Education

Bachelor's degree in STEM

Tools

AWS

Job description

Amazon’s Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. You will attack Amazon’s services, applications, and websites to discover security issues and report them to internal teams.

This role offers challenging opportunities and leadership potential within a collaborative team. You will work with Information Security across business verticals, gaining deep knowledge of Amazon's architecture while shaping security trade-offs to protect customers.