Amazon Stores Security is seeking a Security Engineer for the Application Security Compliance Penetration Testing team. This role involves attacking Amazon's services and applications to identify security issues and collaborating with technology teams to resolve them. The position emphasizes the importance of security in maintaining customer trust and compliance with regulatory commitments. Engineers will engage with various business verticals, contributing to security improvements and tooling.

• Bachelor's degree in a STEM field or experience in IT Security
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• 3+ years of hands-on application penetration testing or offensive security assessments experience
• 2+ years of programming or scripting experience in Python, Go, Java, C++, or a similar language
• Experience manually identifying, exploiting, and documenting application vulnerabilities
• Experience writing penetration test reports and communicating findings to software development teams
• Experience performing security activities across one or more phases of the software development lifecycle
• Experience with AWS products and services
• Experience testing service-oriented or RPC-based backend services
• Experience building security automation for testing and reporting
• Experience using AI or LLM-assisted tooling for security testing
• Working knowledge of regulatory or compliance frameworks such as PCI DSS, SOX, or GDPR
• Familiarity with recognized testing standards such as OWASP ASVS or OWASP Top 10
• Offensive security certification such as OSCP, OSWE, GPEN, or PenTest+

• Conduct high quality penetration tests independently or as part of a team
• Create detailed engagement plans and document findings, gaps, and remediation recommendations
• Contribute to team tooling, innovation, and improvements
• Communicate and collaborate with partner teams and senior leadership to resolve security findings

• Employees at Amazon are often offered comprehensive health benefits—including multiple medical plan options (no pre-existing condition exclusions, 100% covered in-network preventive care), dental and vision plans, a 24/7 medical advice line from day one, expert second-opinion services, and broad mental-health support with several free counseling sessions (including pediatric). Financial wellness typically includes a 401(k) with company match (up to 2%), Restricted Stock Units (equity), FSAs, an emergency savings program, product and partner discounts, and even college-savings and home-purchase programs. Overall, the package is designed to support employees and their families’ health, finances, and day-to-day life.