Security Engineer, Compliance

To support Amazon's regulatory and compliance commitments, the full-time Security Engineer, Compliance will conduct penetration testing on applications, services, and websites, working closely with technology teams to identify and resolve security issues while collaborating with various stakeholders in a virtual environment. Key responsibilities Conducting high-quality penetration tests independently or as part of a team Creating detailed engagement plans and documenting findings, gaps, and remediation recommendations Communicating and collaborating with partner teams and senior leadership to influence the resolution of discovered security findings Required qualifications Bachelor's degree in a STEM field or equivalent experience in IT Security 2+ years of experience with a scripting language or professional software development 3+ years of hands-on application penetration testing or offensive security assessments Experience identifying, exploiting, and documenting application vulnerabilities Experience writing penetration test reports and communicating findings to development teams