Senior Security Engineer, ReSec Red Team
AWS Utility Computing (UC) provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2), to new product releases that set AWS apart in the industry. As part of the UC organization, you’ll support the development and management of Compute, Database, Storage, Internet of Things (IoT), Platform, and Productivity Apps services in AWS. Within AWS UC, Amazon Dedicated Cloud (ADC) roles engage with customers requiring specialized security solutions for their cloud services.
The ReSec Red Team participates in security research, penetration testing, threat modeling, and design. We are seeking a Senior Security Engineer with a focus on database security to ensure our services and applications adhere to the highest security standards. Passion for security, vulnerability research, and database technologies is essential.
Responsibilities
- Conduct security research, vulnerability assessments, and penetration testing.
- Design and implement security controls for cloud services.
- Collaborate with teams to enhance security posture.
Qualifications
- 6+ years of experience in software security, including vulnerability research and penetration testing.
- Bachelor’s degree in Computer Science or related field, or equivalent work experience.
- 4+ years working in a Linux environment.
- 4+ years experience with scripting languages (Shell, Python, Perl).
- 3+ years experience with relational databases, focusing on user and role management, authentication, authorization, and network protocols.
- Experience with database engines such as MySQL/MariaDB or PostgreSQL.
- Experience with AWS or similar cloud platforms.
- Knowledge of full-stack Linux/Unix architectures.
- Working knowledge of C/C++.
- Experience managing security incidents and threat response.
Additional qualities include a passion for security research, participation in security competitions or bug bounty programs, domain expertise in security architecture, communication security, IAM, cryptography, or software security, and a data-driven approach to supporting ideas with evidence.
#J-18808-Ljbffr
