Security Engineer II - Penetration Tester Amazon
Seattle, WA

Job Description

Amazon's Offensive Security Team is looking for a penetration tester to identify problems before they're exploited and help keep Amazon secure and safe from attackers.

This role has a broad scope, ranging from testing a variety of Amazon's services, software and hardware, relaying findings to product owners and Information Security teams, and helping to drive overall improvements to Amazon's security posture. This role presents the ultimate test of implementing one's security knowledge, coupled with the ability to learn and operate as part of a team of highly skilled individuals. This position will provide you with challenging opportunities, both technologically and as a leader.

A Security Engineer at Amazon is expected to be strong in multiple domains. Engineers in this role work closely with teams throughout Information Security, such as Threat Intelligence and Application Security, and provide technical leadership and advice to teams throughout Amazon. The partnerships forged with teams across Amazon have a direct impact of both the security of Amazon and our customers.

Engineers in this role must show exemplary judgment in making technical trade-offs between short versus long term security and business goals. They must also demonstrate resilience and navigate difficult situations with composure and tact. This role will be expected to provide thought leadership for the organization, as you invent and innovate in the course of your duties. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Amazon and its customers secure.

Responsibilities:

* Conduct full cycle engagements with business units independently, or as part of a team.
* Perform manual penetration testing of client systems, web sites, and networks to discover and document vulnerabilities.
* Thoroughly document vulnerabilities and other findings for client consumption.
* Communication skillset to influence SVPs, VPs, Directors, and Domain Managers to prioritize and execute remediation plans.