Security Engineer, AWS Proactive Security

Amazon (AWS) hires a Security Engineer to verify security fixes for services and features before launch. The role combines manual code audits, proof-of-concept development, and automation to assess vulnerabilities and help developers improve application security.

Responsibilities:

• Automate the verification and remediation of security issues
• Manually audit the source code of web services and software authored in house by Amazon
• Write proof of concept code to demonstrate the severity of a potential security issue
• Provide clear communication on issues to developers that suggest and help to test the fix
• Partner with AWS developers to drive improvement in application security as a result of security review engagements
• Provide actionable long term risk mitigation guidance

Requirements:

• 2+ years of web protocols, common security attacks, and remediation (non-internship) experience
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience scripting with Python, Perl, Bash or PowerShell
• Experience with AWS services or other cloud offerings
• Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell)
• Experience using standard security assessment and penetration testing tools such as BurpSuite, Metasploit, and IDA Pro