Security Engineer, Compliance

Job Summary

To support Amazon's regulatory and compliance commitments, the full-time Security Engineer, Compliance will conduct penetration testing on applications, services, and websites, working closely with technology teams to identify and resolve security issues while collaborating with various stakeholders in a virtual environment.

Key responsibilities

• Conducting high-quality penetration tests independently or as part of a team
• Creating detailed engagement plans and documenting findings, gaps, and remediation recommendations
• Communicating and collaborating with partner teams and senior leadership to influence the resolution of discovered security findings

Required qualifications

• Bachelor's degree in a STEM field or equivalent experience in IT Security
• 2+ years of experience with a scripting language or professional software development
• 3+ years of hands-on application penetration testing or offensive security assessments
• Experience identifying, exploiting, and documenting application vulnerabilities
• Experience writing penetration test reports and communicating findings to development teams