MyPage is a personalized page based on your interests.The page is customized to help you to find content that matters you the most.


I'm not curious
1

Senior Offensive Security Engineer

Location Seattle, United States
Posted 09-October-2020
Description
Customer Fulfillment Technology Security (CFTS) team is looking for a senior security engineer to perform red teaming and penetration testing against our fulfillment and operations environment.

The scope of this role includes performing end to end full stack engagements - from scoping, to threat modeling, information gathering, discovery, vulnerability exploitation, lateral movement, post-exploitation, and executive reporting. Your engagements will include internal, external, web, mobile, and other environments.

You will be responsible for working closely with many teams at Amazon, while testing their environments. You will exhibit a strong sense of customer obsession and earn trust while working with those teams in a consulting facility. You will be providing deep security expertise and insight to correctly identify and explain the security risks and vulnerabilities while working with business teams on remediation strategies.

Job Responsibilities
- Perform full stack security testing on business units independently as well as within a team
- Perform red team campaigns of client systems, websites, and networks to discover high-quality vulnerabilities
- Thoroughly document exploit chain/proof of concept scenarios for client consumption
- Identify security monitoring weaknesses and recommend Amazon SOC detection improvements
- Develop innovative and scalable tools, solutions, and processes to enhance the Offensive Security team's operations
- Manage ad-hoc penetration testing contracts by 3rd-party vendors on an as-needed basis
- Communicate with VPs, Directors, and technology leaders to prioritize and execute remediation plans
-Develop methodologies, engagement models, and reporting
Basic Qualifications
- Bachelor's Degree in Computer Science, or equivalent work experience
- 7+ years of security engineering experience, including red teaming, penetration testing or vulnerability assessments
- Programming experience in Python, C/C++, JavaScript, .NET or other interpreted or compiled languages
- Strong experience with red teaming and penetration testing best practices
- Security testing tools including Cobalt Strike, C2 infrastructure, Nmap, Burp Suite
- Windows, Linux, and MacOS operating systems
- Web application technologies

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit

 
Awards & Accolades for MyTechLogy
Winner of
REDHERRING
Top 100 Asia
Finalist at SiTF Awards 2014 under the category Best Social & Community Product
Finalist at HR Vendor of the Year 2015 Awards under the category Best Learning Management System
Finalist at HR Vendor of the Year 2015 Awards under the category Best Talent Management Software
Hidden Image Url