Job Description
The Finance Operations Risk Intelligence - Offensive Security team is looking for a security engineer to perform red teaming and penetration testing on Finance Operations (e.g., Accounts Payable, Accounts Receivable, Payroll, Procurement, Amazon Corporate Security, and Real Estate and Facilities) infrastructure and applications. The scope of this role includes performing end to end full stack engagements - from scoping, to threat modeling, information gathering, discovery, vulnerability exploitation, lateral movement, post-exploitation, and executive reporting. Your engagements will include internal, external, web, mobile, and other environments. You will be responsible for working closely with many teams at Amazon, while testing their application environments. You will exhibit a strong sense of customer obsession and earn trust while working with these teams. You will be providing deep security expertise and insight to correctly identify and explain the security vulnerabilities and impact while working with business teams on remediation strategies.
Key job responsibilities
Perform full stack security testing on business units independently as well as within a team
Perform red team campaigns of client systems, websites, and networks to discover high-quality vulnerabilities
Thoroughly document exploit chain/proof of concept scenarios for client consumption
Identify security monitoring weaknesses and recommend Amazon SOC detection improvements
Develop innovative and scalable tools, solutions, and processes to enhance the Offensive Security team’s operations
Communicate with VPs, Directors, and finance and technology leaders to prioritize and execute remediation plans
About the team
Our vision is to make Finance Operations assets the most difficult target to exploit by bad actors. We perform red team engagements and penetration testing on Finance Operations assets, including upstream and downstream systems.
We are open to hiring candidates to work out of one of the following locations:
Arlington, VA, USA
Basic Qualifications:
- Bachelor's degree in Computer Science or related field or equivalent experience
- 5+ years of security engineering experience, including red teaming, penetration testing, vulnerability research, and manual code auditing for vulnerabilities
Preferred Qualifications:
- Experience with physical red teaming, hardware hacking, offensive IoT security, red teaming cloud environments, reverse engineering, payload development, social engineering, exploit development
- Programming experience in Python, C/C++, JavaScript, .NET and/or other interpreted or compiled languages
- Strong experience with red teaming and penetration testing best practices
- Strong understanding of web application, networking, and cloud technologies
- Experience with offensive security testing tools such as Cobalt Strike, C2 infrastructure, Nmap, and/or Burp Suite
- Experience with Windows, Linux, and MacOS operating systems
- Experience with implementing red team attack infrastructure
- Experience with custom offensive security tool development
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
More Information
Application Details
-
Organization Details
Amazon.com Services LLC
Recommended Comments
There are no comments to display.
Join the conversation
You are posting as a guest. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.