Security Engineer, Compliance Testing

Job Summary

To support the Application Security Compliance Penetration Testing team, the full-time Security Engineer, Compliance Testing will conduct penetration tests on Amazon's services and applications, document findings, and collaborate with various technology teams to resolve security issues.

Key responsibilities

• Conduct high-quality penetration tests independently or as part of a team
• Create detailed engagement plans and document findings, gaps, and remediation recommendations
• Communicate and collaborate with partner teams to influence and drive the resolution of security findings

Required qualifications

• Bachelor's degree in a STEM field or equivalent experience in IT Security
• 3+ years of hands-on application penetration testing or offensive security assessments experience
• 2+ years of programming or scripting experience in Python, Go, Java, C++, or a similar language
• Experience in manually identifying, exploiting, and documenting application vulnerabilities
• Experience writing penetration test reports and communicating findings to software development teams