Security Engineer II Stores Red Team

Amazons Stores Security Red Team is seeking a Security Engineer to help keep Amazons infrastructure secure for its customers by attacking Amazons services infrastructure processes and controls and by partnering with defensive & service teams to remediate weaknesses and sharpen our detective preventative and response capabilities. This role presents an ultimate test of ones security knowledge and ability along with the support of a team of highly skilled individuals. This position will provide you with challenging opportunities both technologically and as a leader but will also be a great deal of fun if hacking Amazon alongside a team of highly skilled individuals sounds exciting to you.

A Security Engineer at Amazon is expected to be strong in multiple domains. Engineers in this role work closely with teams throughout Amazon Security as well as provide technical leadership and advice to teams and leaders throughout Amazon. You will be in direct contact with teams in a variety of business verticals giving you first hand knowledge about how Amazon is built and how it operates at a deep technical level. Additionally you will leverage the knowledge you gain about Amazon to find new ways to break services processes and technologies throughout the company.

Engineers in this role must show exemplary judgment in making technical tradeoffs between shortterm fixes and longterm security and business goals. They must also demonstrate resilience and navigate ambiguous situations with composure and tact. Individuals in this role will be expected to provide thought leadership for the organization as you discover invent and innovate throughout the course of their duties. Above all else a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Amazon and its customers secure.

Key job responsibilities
Conducting red team engagements throughout Amazon independently or as part of a team.
Creating detailed engagement plans performing operations and emulating adversary tactics techniques and procedures (TTPs).
Thoroughly documenting timelines attack paths findings/gaps and recommendations.
Communicating and collaborating with partner teams service owners Amazon Security teams and senior leadership to influence prioritize and drive the resolution of discovered security findings.
Performing manual examination of client systems applications and networks to discover weaknesses and thoroughly documenting high quality exploit chain/proof of concept scenarios/reports for customer consumption.
Contributing to tooling processes documentation and quality of red team operations.
Helping to recruit and interview and train/mentor/develop other Red Team engineers.

Bachelors degree in computer science or equivalent
3 years of programming in Python Ruby Go Swift Java .Net C or similar object oriented language experience
3 years of experience on a Red Team

2 years of any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
Experience with AWS products and services
Experience with common offensive security tools (e.g. Cobalt Strike Metasploit Burp Suite)

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race national origin gender gender identity sexual orientation protected veteran status disability age or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees supervisors and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees supervisors and staff to ensure exceptional customer service; and follow all federal state and local laws and Company policies. Criminal history may have a direct adverse and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above as well as the abilities to adhere to company policies exercise sound judgment effectively manage stress and work safely and respectfully with others exhibit trustworthiness and professionalism and safeguard business operations and the Companys reputation. Pursuant to the Los Angeles County Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.

Pursuant to the San Francisco Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136000/year in our lowest geographic market up to $212800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on jobrelated knowledge skills and experience. Amazon is a total compensation company. Dependent on the position offered equity signon payments and other forms of compensation may be provided as part of a total compensation package in addition to a full range of medical financial and/or other benefits. For more information please visit This position will remain posted until filled. Applicants should apply via our internal or external career site.