Network Security Penetration Tester

Join Amazon’s AppSTAR Network Security team to execute network penetration testing across fulfillment networks and infrastructure supporting Amazon Stores’ services.

Responsibilities

• Run high-quality network penetration tests with a team across Amazon fulfillment networks, plus AWS-based and non-cloud network infrastructure supporting Amazon Stores’ services
• Create engagement test plans and produce detailed written reports covering findings, gaps, and remediation recommendations for both technical and leadership audiences
• Perform remote and on-site network assessments at Amazon facilities, including up to approximately 15% travel; activities may include physical network reconnaissance, VLAN enumeration, and lateral movement
• Improve network security assessment efficiency and coverage by contributing to team tooling, automation, and methodology
• Coordinate with partner teams, service owners, and network engineering to influence and prioritize remediation of discovered security findings
• Support team growth through mentoring junior members and enabling knowledge sharing via peer review, training, and documentation of tradecraft

Requirements

• 3+ years of experience combining any of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
• 3+ years of scripting, programming, and security code review in a common programming language (non-internship)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and development of exploits or an equivalent capability
• Knowledge of networking protocols including HTTP(S), DNS, and TCP/IP
• Experience applying threat modeling or other risk identification techniques (or equivalent)
• 3+ years of experience in network penetration testing, infrastructure security assessment, or a related offensive security role

Technologies

• AWS
• Python
• Java
• C++
• HTTP(S)
• DNS
• TCP/IP

Preferred Qualifications

• Experience with AWS products and services
• Experience with Python, Java, or C++
• Bachelor’s degree in computer science or equivalent
• Relevant industry certifications such as OSCP, GPEN, OSEP
• Experience testing industrial control systems (ICS), operational technology (OT), or IoT network environments
• Experience with CTF competitions, CVE research, and/or Bug Bounty recognition

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription), Basic Life & AD&D, plus option for Supplemental life plans
• EAP
• Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Work Location / Travel

• Remote
• Up to approximately 15% travel for on-site network penetration testing at Amazon facilities across North America

Work/Life Balance

• Flexible work hours and arrangements are part of the culture