Offensive Security Engineer, Amazon

• 2+ years in an Information Security role, preferably in application security, penetration testing, red teaming, incident response, or a technical engineering role
• Knowledge and understanding of security engineering, application security in web, mobile, IoT and cloud, system and network security, cryptography, authentication, and security protocols
• Programming experience with a focus in scaling and automation
• Solid knowledge of vulnerability assessment and remediation best practices
• Demonstrable teamwork skills and resourcefulness
• Independent project management capability
• Strong sense of customer obsession, ownership, and sense of urgency
• Sharp analytical abilities and proven design skills

Desirable

• This role is responsible for the engagement and operation of Amazon’s bug bounty program, including validation of findings, interfacing directly with security researchers outside of Amazon, supporting internal service owners with end-to-end remediation efforts, and influencing the internal technology ecosystem to pursue best security practices
• Research, reproduce, and respond to a variety of security vulnerabilities reported to the bug bounty program
• Manage relationships with external security researchers and white-hat hackers working with Amazon
• Lead end-to-end remediation efforts, from report through verification
• Take a technical leadership role in innovating and driving company-wide initiatives
• Evangelize security culture to the internal business teams
• Communicate bug bounty findings and provide technical direction with leadership and developers to create and drive remediation efforts