Security Engineer II, Stores AppSec & Pen Tests

Amazon; United States; On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amazon is seeking a Security Engineer for its Stores AppSec Team to attack Amazon’s services, applications, and websites, uncover security issues, and report findings to internal teams. You will lead and collaborate with Information Security across diverse business verticals while upholding customer trust and security excellence.

You will conduct high-quality security engagements, document gaps, and drive remediation with senior stakeholders.

Qualifications

• 3+ years programming in OO languages (Python, Java, C++, etc.)
• 2+ years scripting and security code review
• 2+ years troubleshooting, logs, or automation via the command line
• Bachelor's degree in STEM or 2+ years IT Security experience
• Knowledge of HTTP, DNS and TCP/IP
• Knowledge of security vulnerabilities and remediation techniques

Responsibilities

• Conducting high quality application security reviews and penetration tests independently or as part of a team
• Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations
• Contributing to team tooling, innovation, and improvements
• Communicating with partner teams, service owners, Information Security, and senior leadership to influence and drive remediation of findings

Skills

Programming languages

Log analysis

Security review

Networking basics

Threat modeling

AWS familiarity

CLI tools

Education

Bachelor's degree in STEM or 2+ years IT Security experience

Tools

Command line tools

Job description

Amazon is seeking a Security Engineer for its Stores AppSec Team to attack Amazon’s services, applications, and websites, uncover security issues, and report findings to internal teams. You will lead and collaborate with Information Security across diverse business verticals while upholding customer trust and security excellence.

You will conduct high-quality security engagements, document gaps, and drive remediation with senior stakeholders.