Sr. Engineer, Red Team, Bots & DDoS Threat Intelligence

## Responsibilities - Design and execute red team engagements targeting bot detection platforms, WAFs, CDN protections, and DDoS mitigation services - Develop and maintain custom offensive tooling — anti-detect browser automation, TLS fingerprint manipulation (JA3/JA3S), Canvas/WebGL evasion, and behavioral replay systems - Research and simulate emerging AI-driven attack vectors including autonomous browsing agents, LLM-powered bots, and agentic scraping techniques - Mentor junior engineers on tradecraft, engagement methodology, and responsible offensive operations - Collaborate with detection engineering teams to translate findings into measurable defensive improvements; author detailed technical reports with actionable remediation guidance ## Requirements - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience - Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques ## Nice to Have - Experience applying threat modeling or other risk identification techniques or equivalent - 5+ years of experience in offensive security, red teaming, or penetration testing - Deep hands-on expertise in web application security, bot evasion techniques, or DDoS attack methodologies - Experience with anti-detect browser frameworks (Nodriver, Puppeteer Stealth, Playwright) - Familiarity with LLM-based automation and AI agent architectures ## Benefits Amazon offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. USA, , Virtual - 178,400.00 - 226,700.00 USD annually Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.