Security Engineer, AWS Proactive Security

Amazon Security is seeking a pre-launch Security Engineer to support a testing team evaluating AWS services and features before release. In this role, you review and validate builder-proposed security fixes, reproduce security findings across customer-like environments, and help raise the security bar through automation and deeper analysis.

Working onsite in Florida, you will contribute to the team’s responsibility for manual assessment of products, services, and software released by AWS. The role is paid USD 136,000 - 184,000 per year, and the minimum experience requirement is 2+ years.

What you’ll do

• Automate the verification and remediation of security issues
• Manually audit source code for web services and Amazon-authored software
• Write proof of concept code to demonstrate the severity of potential security issues
• Communicate clearly with developers on issues and support testing of proposed fixes
• Partner with AWS developers to improve application security based on security review findings
• Provide actionable long term risk mitigation guidance after security reviews
• Perform static code analysis and dynamic reproduction to validate whether fixes are sufficient
• Support and build automated tooling (for example, fuzzers, scanners, analyzers) to verify security fixes related to penetration testing

Requirements

• 2+ years of non-internship experience with web protocols, common security attacks, and remediation
• Bachelor’s degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent experience
• Experience scripting with Python, Perl, Bash, or PowerShell

Tools and technologies

• Python, Perl, Bash, PowerShell
• BurpSuite, Metasploit, IDA Pro
• AWS

Benefits

• Health insurance (medical, dental, vision, prescription; Basic Life and AD&D insurance; and options for Supplemental life plans; EAP; Mental Health Support; Medical Advice Line; Flexible Spending Accounts; Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

Preferred qualifications

• Experience with AWS services or other cloud offerings
• Experience coding or scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell)
• Experience using security assessment and penetration testing tools such as BurpSuite, Metasploit, and IDA Pro

About the team

The organization emphasizes diverse experiences and encourages applications even if you do not meet every qualification listed in the job description. Amazon Security focuses on maintaining a high security bar across Amazon’s products and services and offers opportunities to build experience across a wide variety of areas, including cloud and other business domains.

Inclusive team culture, ongoing learning and DEI events, and training and career growth are part of the team’s approach. The company also highlights work-life harmony, including flexible work hours and arrangements.