You will decide where to look, as well as test what you're given. You must produce results in ambiguity, follow a signal wherever it leads, and drive resolution with teams outside your own when a fix isn't simple. You will deliver independently, ask for guidance when a problem moves into unfamiliar territory, and say clearly when a line of investigation should stop.
Amazon's Leadership Principles of "Dive Deep", "Ownership", "Earn Trust" and "Invent and Simplify" will be called on daily.
Key job responsibilities
Turn real world signals, threat intelligence, scanner output and past findings into testable hypotheses about how an adversary might think about systems in production
Test live AWS services and internal systems, combining penetration testing with AI-augmented source code review, and direct the tooling at trust boundaries and attack paths it would not reach on its own
Bring creativity to every investigation: invent new techniques and research areas nobody has explored yet
Investigate whether something novel you've uncovered could apply across other systems, then prove or rule out impact end to end with safe, reproducible proof-of-concept work
Trace attack paths across chained components to show compound risk that stays invisible when each component is tested alone
Take each finding to a resolution: work with service teams, SecOps and AppSec on the fix, validate it, and check the fix can't be bypassed
Turn what you find into lasting defences, such as detections that run across the fleet, security canaries, fuzzers and documented methods, and track whether other teams adopt them
Build and tune the harnesses that steer the team's AI testing tools, measuring where they miss attack patterns or produce false positives
Test agentic AI systems as an adversary would, including tool use, memory, agent-to-agent communication and orchestration
Write clear results that record what you tested, why, what you found or ruled out, and the risk that remains
Peer review other engineers' scopes and findings, and mentor engineers and apprentices on the team
A day in the life
Your morning might start with a cluster of real world signals that hint at something nobody has looked at yet. You form a hypothesis: if one system could be built this way, could others? You point the team's AI tooling at the source code to find candidates, then test the most promising ones by hand.
By the afternoon you've tested your hypothesis on one system and know exactly what an adversary could or couldn't reach. Now the question is scale. You write a query to see whether it could apply more widely, prove or rule out the worst cases safely, and agree priorities with SecOps and the service teams that own them.
Over the following weeks you stay with it. You review the proposed fix and check it can't be bypassed. You work with a detection team to turn your test into a check that runs across the fleet without you, so what you discovered keeps protecting AWS wherever it might appear.
In between, you review a peer's scope before their testing starts, help an apprentice through their first proof of concept, and share what you learned with the team so others can build on your idea.
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
Experience applying threat modeling or other risk identification techniques or equivalent
Perform offensive testing of web applications and services, and source code review, to identify non-trivial issues
Script your way out of problems and deploy code in an enterprise environment
Experience with AWS technologies and services (e.g. S3, Lambda, EC2, KMS, IAM)
Be data-driven and support your conclusions with evidence
A Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent professional experience
Experience in professional penetration testing, source code auditing, bug hunting, or CTF experience
Demonstrable depth in at least two complex security domains such as identity and access management (IAM), web application and API security, networking, or workload and tenant isolation
Experience finding security issues in multiple languages, including one or more of Java, Python, JavaScript, Rust, Ruby and C
Experience in code development using Python or an equivalent language, including boto3
Experience turning a single finding into a campaign or detection across many systems
Experience using AI tools or LLMs to scale security research, and judging where they fall short
Experience working with threat intelligence or detection teams
Experience performing or supporting Red Team engagements
Experience running an initiative such as a CTF or an apprenticeship
Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
