Senior Security Engineer, ReSec Red Team at Amazon

Senior Security Engineer, ReSec Red Team

Job ID: 2870185 | Amazon Development Center U.S., Inc.

The ReSec Red Team members participate in security research and review, penetration testing, threat modeling and design. We are looking for a Senior Security Engineer with a focus on database security to help ensure our services and applications are designed and implemented to the highest security standards. We need individuals who are passionate about security and vulnerability research as well as database technologies.

BASIC QUALIFICATIONS

• 6+ years' experience in software security (vulnerability research, penetration testing, etc)
• Bachelors' degree in Computer Science or similar field or equivalent work experience.
• Deep knowledge and experience in Linux and Linux internals
• Working knowledge of at least one scripting language (shell, Python, Perl).
• Working knowledge of at least one relational database with a focus on user and role management, authentication/authorization and network protocol.

PREFERRED QUALIFICATIONS

• Passionate about computer security and desire to explore and find security issues (“break things”).
• Experience performing or supporting Red Team engagements / penetration testing.
• Participation in computer security competitions (CTFs), Bug Bounty programs, open-source security research, CVE analysis.
• Domain expertise in at least 3 of: security architecture and engineering, communication and network security, identity and access management (IAM), security assessment and testing, cryptography, and software development security.
• A data-driven and quantitative mentality—you excel in supporting ideas with available evidence.
• Experience with the design and implementation of technical security controls at the business division level.
• Experience engineering, administering or managing at least one relational database engine, preferably MySQL/MariaDB or PostgreSQL.
• Experience with AWS or similar enterprise cloud computing platforms.
• Experience with full-stack (Linux / Unix) software architectures from UI to infrastructure.
• Working knowledge of C/C++.
• Experience with managing security incidents and threat response.

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.