Senior Security Engineer, AWS Security Verification & Validation Team

We are looking for a Senior Security Engineer to join Point-in-Time Security Testing, AWS's expert security assurance function for the launches and architectures where security automation alone is not Basic qualifications: - Experience developing software code in one or more programming languages (java, python, etc.) - Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques - Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.) - Experience in risk assessment and enabling organizations to make security decisions - Experience working with operations and business teams to communicate problem impacts and understand business requirements - Experience in enterprise software - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - 5+ years in professional penetration testing, source code auditing, bug hunting, or competitive CTF - Demonstrated ability to find non-trivial vulnerabilities through offensive testing of web applications and services and through source code review - Demonstrated mastery of two or more genuinely complex security domains such as networking, workload and tenant isolation, web application and API security, IAM, or cryptography, deep enough to find issues others miss and to encode that expertise into automation - Experience building and steering AI agents to do useful security work, and reasoning about how those same agentic systems can be attacked