3 days ago
Herndon, VA, USA +5 moreMid Level
Base Salary
$159k - $213k/yr
Responsibilities
- Perform penetration tests across Amazon Specialized Businesses products, services, devices, and software, including developing proof-of-concept exploits.
- Conduct vulnerability research using symbolic execution, static analyzers, fuzzers, scanners, machine learning, and custom tooling.
- Create tools and automation to discover vulnerabilities and scale security testing.
- Review code, technical solutions, and system architectures to identify vulnerabilities and provide contextual remediation guidance.
- Document vulnerabilities, impacts, and recommendations for engineering stakeholders and leadership.
- Verify security fixes and conduct independent vulnerability research on launched products and dependencies.
- Perform low-level reviews of hardware, bootloaders, radios, secure enclaves, operating-system security features, authentication mechanisms, AI, mobile, and web applications.
Requirements
- Bachelor’s degree in computer science or equivalent.
- At least 3 years of non-internship industry experience identifying security vulnerabilities, understanding attack patterns, and applying remediation techniques.
- Knowledge of industry-based security vulnerabilities and remediation techniques.
- Knowledge of AWS or equivalent cloud services.
- Experience tracing sources and sinks during code review to identify vulnerabilities and provide root-cause remediation guidance.
- Experience designing and reviewing secure system architectures using threat modeling and sophisticated modern attacks.
- Preferred: foundational hardware security knowledge; CTF, CVE research, or bug bounty experience; experience applying and assessing machine-learning technologies; and published security research.
Benefits
- Flexible work hours and arrangements supporting work-life balance.
- Knowledge sharing, mentorship, training, and career-advancing resources.
- Benefits include health, dental, vision, prescription, life and AD&D insurance, an employee assistance program, mental health support, a medical advice line, flexible spending accounts, adoption and surrogacy reimbursement, 401(k) matching, paid time off, and parental leave.
- Applicants must be U.S. citizens or nationals, U.S. permanent residents, refugees, or asylees due to export-control requirements.
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.