Sr. Security Engineer, OffSec
Arlington, Virginia, USA
Amazon.com
Free shipping on millions of items. Get the best of Shopping and Entertainment with Prime. Enjoy low prices and great deals on the largest selection of everyday essentials and other products, including fashion, home, beauty, electronics, Alexa...The Finance Operations Risk Intelligence - Offensive Security (FORI-OS) team is looking for a Senior Security Engineer to lead and perform red teaming and penetration testing on Finance Operations (e.g., Accounts Payable, Accounts Receivable, Payroll, Procurement, and Corporate facilities) infrastructure and applications. The scope of this role includes performing end to end full stack engagements - from scoping, to threat modeling, information gathering, discovery, vulnerability exploitation, lateral movement, post-exploitation, and executive reporting. Your engagements will include internal, external, web, mobile, and other environments. You will be responsible for working closely with many teams at Amazon, while testing their application environments. You will exhibit a strong sense of leadership, customer obsession, and earn trust while working with those teams in a consulting facility. You will be providing deep security expertise and insight to correctly identify and explain the security risks and vulnerabilities while working with business teams on remediation strategies.
Job Responsibilities:
- Define goals and priorities that enable our team to deliver against business objectives
- Contribute to briefings, roadmaps, and long-range planning documents
- Partner with finance, engineering, and product teams across Amazon to develop scalable solutions to security vulnerabilities
- Lead full stack security testing on business units independently as well as within a team
- Lead red team campaigns of client systems, websites, and networks to discover high-quality vulnerabilities
- Thoroughly document exploit chain/proof of concept scenarios for client consumption
- Identify security monitoring weaknesses and recommend Amazon SOC detection improvements
- Develop innovative and scalable tools, solutions, and processes to enhance the Offensive Security team’s operations
- Communicate with VPs, Directors, and finance and technology leaders to prioritize and execute remediation plans
Basic Qualifications
- Bachelor's degree in Computer Science or related field or equivalent experience
- 7+ years of security engineering experience, including red teaming, penetration testing or vulnerability assessments
- Programming experience in Python, C/C++, JavaScript, .NET or other interpreted or compiled languages
- Strong experience with red teaming and penetration testing best practices
- Security testing tools including Cobalt Strike, C2 infrastructure, Nmap, Burp Suite
- Windows, Linux, and MacOS operating systems
- Web application technologies
Preferred Qualifications
- Experience with physical red teaming, hardware hacking, offensive IoT security, red teaming cloud environments, reverse engineering, payload development, social engineering, exploit development
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Burp Suite C C++ Cloud Cobalt Strike Computer Science Exploit Finance Full stack JavaScript Linux MacOS Monitoring Nmap Offensive security Pentesting Python Red team Reverse engineering Vulnerabilities Windows
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Ethical hacker / Pentester H/F jobs
- Open Information Security Specialist jobs
- Open Cyber Security Specialist jobs
- Open Manager Pentest H/F jobs
- Open Cyber Security Architect jobs
- Open Senior Cyber Security Engineer jobs
- Open Product Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Staff Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open IT Security Analyst jobs
- Open Consultant SOC / CERT H/F jobs
- Open Cybersecurity Consultant jobs
- Open Security Specialist jobs
- Open Senior Information Security Engineer jobs
- Open Cybersecurity Specialist jobs
- Open Senior Penetration Tester jobs
- Open Senior Security Architect jobs
- Open Security Researcher jobs
- Open Sr. Security Engineer jobs
- Open IT Security Engineer jobs
- Open Clearance-related jobs
- Open ISO 27001-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open Application security-related jobs
- Open Pentesting-related jobs
- Open Agile-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open SaaS-related jobs
- Open Analytics-related jobs
- Open CISA-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Java-related jobs
- Open Security Clearance-related jobs
- Open DevOps-related jobs
- Open IDS-related jobs
- Open Malware-related jobs
- Open EDR-related jobs
- Open CEH-related jobs
- Open Kubernetes-related jobs
- Open Forensics-related jobs