Senior Penetration Testing Engineer, Security Testing

Do you enjoy breaking software and services? Do you strive to understand systems, software, and services deeply in order to break them? Do you find yourself automating your work every chance you get? If so, we’d love for you to join us.

The Security penetration testing team is looking to hire a Penetration Testing Engineer to join its ranks. Our team is responsible for manual assessment of all products, services and software released by Amazon. We specialize in diving deep to find security issues that static analysis tools cannot and we write tooling to help with these goals. The threat surface area is large and diverse, and we use results found in manual analysis to help improve our enterprise-wide automation to proactively spot and fix potential security issues to protect customers.

This is a hands-on technical role that includes mentoring, guiding, and supporting junior engineers. The person in this role will help us evolve the way we work by advising and improving on team processes to bring efficiency and enable us to scale. This could be done by through automation, advising leadership, owning problem areas and programs, or something else entirely. We want smart, creative engineers who want to contribute to uplifting the entire organization.

On this team you will be reading and manually reviewing source code in Java, Ruby, Python, JavaScript, Rust, C, and other languages to look for security bugs. We don’t expect you to be an expert at those languages, but we do want you to be curious and able to learn new things quickly.

On this team you’ll be writing proof of concept software to demonstrate impact of an issue. This is not oftware development engineering nor is it a traditional red team position. You won’t be phishing people or writing enterprise-grade software, but we do hope you can script your way out of a problem.

If you're passionate about finding security bugs, writing tools to reduce manual testing, developing others and enjoy seeing your work's impact across the internet, then we’d like you to help us solve some interesting and complex problems at Amazon scale.

Key job responsibilities
You are a leader in our team. You guide less senior engineers during pentest engagements. You advise leadership. You lead engagements, identify scope items, and build test plans. When possible, you champion automation.

Responsibilities:
- Execute manual penetration testing and source code review …