Security Testing Engineer — Penetration & STIGs

Amazon; Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

401(k) matching

Paid time off

Parental leave

Job summary

Amazon's Security team is seeking a Security Testing Engineer to perform security testing and assessments for a U.S. Government program building a classified AI Factory. You will execute tests, document findings, and help remediation efforts while developing repeatable tooling.

You will collaborate with senior engineers and ISSOs, applying offensive and validation methods to defend critical systems with a strong emphasis on TS/SCI with Polygraph clearance and secure configurations.

Qualifications

• 3+ years in security testing, IA/ASP frameworks, cloud security experience.
• Designing test conditions, scripts, and data sets to ensure coverage and control.
• Hands-on pen-testing and STIG-validation experience.
• Current, active US Government Security Clearance TS/SCI with Polygraph.

Responsibilities

• Execute security control tests, penetration tests, and STIG checks.
• Document findings and support remediation tracking.
• Build and maintain test tooling and scripts.
• Support the security control assessment and evidence collection.

Skills

Security testing

Penetration testing

STIG validation

Python scripting

SQL

Job description

Amazon's Security team is seeking a Security Testing Engineer to perform security testing and assessments for a U.S. Government program building a classified AI Factory. You will execute tests, document findings, and help remediation efforts while developing repeatable tooling.

You will collaborate with senior engineers and ISSOs, applying offensive and validation methods to defend critical systems with a strong emphasis on TS/SCI with Polygraph clearance and secure configurations.