Security Engineer-Pentest, Continuous Security Testing
Amazon
Virtual Location UkOn-sitefull timeSystems, Quality, & Security EngineeringPosted 4 days agoEarly applicant likely
This role is aggregated from the employer's public careers feed - the button opens their application page.
We are looking for a Security Engineer to join Continuous Security Testing (CST), the AWS team that thinks like an adversary against systems running in production. You will follow real-world signals to
Basic qualifications:
- Experience applying threat modeling or other risk identification techniques or equivalent
- Perform offensive testing of web applications and services, and source code review, to identify non-trivial issues
- Script your way out of problems and deploy code in an enterprise environment
- Experience with AWS technologies and services (e.g. S3, Lambda, EC2, KMS, IAM)
- Be data-driven and support your conclusions with evidence
- A Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent professional experience
- Experience in professional penetration testing, source code auditing, bug hunting, or CTF experience
- Demonstrable depth in at least two complex security domains such as identity and access management (IAM), web application and API security, networking, or workload and tenant isolation
- Experience finding security issues in multiple languages, including one or more of Java, Python, JavaScript, Rust, Ruby and C
- Experience in code development using Python or an equivalent language, including boto3
About Amazon
Amazon operates data center infrastructure, develops automotive retail platforms, and provides meetings and events services - roles advertised include program managers for physical infrastructure projects, account managers for marketplace partnerships, and service delivery managers for corporate events.
All Amazon jobsStop searching - get matched.
Upload your CV and our AI will surface roles like this one, with the reasons they fit you.
Upload CV - it's free