3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
Bachelor's degree in computer science or equivalent
3+ years of threat modeling experience
3+ years of secure coding
3+ years of identity management and authentication
3+ years of software development
3+ years of cryptography
3+ years of system administration and network security experience
3+ years of experience in a penetration testing or similar offensive security role
Desirables
Experience with AWS products and services
4+ years of threat modeling experience
4+ years of secure coding
4+ years of identity management and authentication
4+ years of software development
4+ years of cryptography
4+ years of system administration and network security experience
What the job involves
Attack Amazon’s services, applications, and websites to discover security issues and report them to internal technology teams.
Provide technical leadership and advice to teams and leaders throughout Amazon.
Find new ways to break services, processes, and technologies throughout the company.
Conduct high quality application penetration tests independently or as part of a team.
Create detailed engagement plans and thoroughly document findings, gaps, and remediation recommendations.
Communicate and collaborate with partner teams, service owners, Information Security, and senior leadership to prioritize and drive the resolution of discovered security findings.
Application process
Applicants should apply via our internal or external career site.
Amazon's mission is to be Earth's most customer-centric company. Their actions, goals, projects, programs, and inventions begin and end with the customer top of mind.