Engineer – Amazon Jobs
Job Description
Job Type: Engineer from home
Location: California work from home
Company: Amazon
To help keep Amazon secure for its customers, the information security penetration testing team at Amazon is looking for a security engineer. In this position, you will conduct attacks on Amazon’s services, programs, and websites in order to find security flaws and notify our internal technology teams about them. If the idea of hacking Amazon with a group of very talented people appeals to you, this position will provide you tough chances both technologically and as a leader, but it will also be a lot of fun.
At Amazon, a security engineer is expected to be knowledgeable in several areas. The engineers in this position collaborate closely with Information Security teams and offer technical guidance and leadership to teams and leaders across Amazon. You will have face-to-face interactions with teams from a range of industry sectors, giving you first-hand experience of how Amazon is designed and functions at a highly technical level. Additionally, you’ll use what you learn about Amazon to come up with fresh approaches to the company’s offerings, procedures, and technological advancements.
In this position, engineers must use exceptional judgment when weighing technical trade-offs between urgent solutions and long-term security and business objectives. You’ll show resiliency and handle uncertain circumstances with poise and tact. As you do your job, you’ll be required to create, discover, and think outside the box for the benefit of the company. To focus on the ultimate objective of keeping Amazon and its customers secure, a strong sense of customer obsession is required.
Responsibilities:
- Performing excellent application penetration tests either alone or with a team * Developing extensive engagement plans and recording results, gaps, and remedial suggestions * Participating in team tooling, innovation, and improvements
- Coordinating efforts to influence, prioritize, and advance the resolution of security findings with partner teams, service owners, information security, and senior leadership.
Requirements:
BASIC REQUIREMENTS
- 3+ years of professional experience with security engineering techniques, such as web application security, network security, authentication and authorization protocols, cryptography, automation, and other software security disciplines. * 3+ years of experience with dynamic and manual code auditing to identify security issues.
- A bachelor’s degree in computer science or a closely related discipline, or comparable work experience, * 3+ years of expertise with interpreted or compiled languages (such as Python, Ruby, C/C++, Java, or.NET) * Experience with threat modeling, design reviews, or other threat analysis approaches
FAVORABLE QUALIFICATIONS
- Knowledge of cloud service providers and their products, preferably AWS and its different technologies and services * Experience with mobile application penetration testing
Experience in a range of security areas, such as system and network security, authentication and security protocols, cryptography, application security, and incident response. Experience in the development of security tooling and automation. Experience in CTF competitions, CVE research, and/or bug bounty recognition. Advanced degree in computer science or a closely related field.
