Security Engineer, Compliance Penetration Testing
Core
Conducting application security compliance penetration tests to find and resolve security issues in Amazon's services, applications, and websites to support regulatory and compliance commitments.
Role type
Senior IC application security penetration tester
Builds
Security test reports, remediation guidance, and improved testing tooling
Domain
E-commerce / Application Security / Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Application penetration testing, offensive security assessments, vulnerability identification and exploitation, penetration test reporting, networking protocols (HTTP, DNS, TCP/IP), programming/scripting (Python, Go, Java, C++)
Preferred skills
SDLC security activities (threat modeling, secure code review), AWS services, backend service testing, security automation, AI/LLM-assisted testing, regulatory frameworks (PCI DSS, SOX, GDPR), testing standards (OWASP ASVS, PTES), offensive security certifications (OSCP, OSWE, GPEN, PenTest+)
Technologies
Python, Go, Java, C++, AWS, HTTP, DNS, TCP/IP
Responsibilities
Conducting high quality penetration tests independently or in teams, creating engagement plans and documenting findings with remediation recommendations, contributing to team tooling and innovation, collaborating with partner teams and leadership to drive resolution of security findings
Seniority
Senior, hands-on IC
