Amazon
Security Engineer, Compliance Penetration Testing
$159K–$202K
Virtual Location - Washington, WA · Remote · Full-time · Posted Sep 16, 2026
- Experience
- 3+ years of hands-on application penetration testing or offensive security assessments (non-internship); 2+ years of programming or scripting (non-internship).
- Education
- Bachelor's degree in a STEM field or experience in IT Security.
About the job
Conduct compliance-driven penetration tests of Amazon services, applications, and websites, and work with owning teams to remediate security findings.
What you'll do
- Independently or collaboratively conduct penetration tests and create engagement plans and detailed reports with remediation recommendations.
- Improve team testing tools and contribute to innovation.
- Collaborate with service owners and partner teams to prioritize and resolve security findings.
What they ask for
- Bachelor's degree in a STEM field or experience in IT Security.
- Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
- 3+ years of hands-on application penetration testing or offensive security assessments across web applications, APIs, or cloud services (non-internship).
- 2+ years of programming or scripting in Python, Go, Java, C++, or a similar language (non-internship); experience identifying and documenting application vulnerabilities and communicating findings is also required.
Nice to have
- Experience with AWS products and services; SDLC security activities or testing backend services.
- Experience with security automation, AI or LLM-assisted testing, compliance frameworks, recognized testing standards, or offensive security certifications.
Pay
159,300.00 - 202,400.00 USD annually (base salary)
Tools
HTTP, DNS, TCP/IP, Python, Go, Java, C++, AWS
AI focus
Preferred experience using AI or LLM-assisted tooling to accelerate security testing.
Model-written summary · the original posting is authoritative