Pentest Security Engineer II, Devices & Services Pentesting

Join Amazon's elite penetration testing team within the Devices and Services Trust & Security (DSTS) organization, focusing on detecting and exploiting vulnerabilities across Amazon's vast portfolio. This role offers an exciting opportunity to work on diverse projects, from consumer services to Kuiper satellites. As a Pentest Security Engineer II, you'll be conducting in-depth security reviews of complex service workflows, including authentication mechanisms, AI, mobile applications, and web service APIs.

The position is part of a growing team that protects millions of customers by performing security reviews, offensive testing, and vulnerability assessments. You'll work with builder teams to identify high-impact security vulnerabilities across the web services ecosystem supporting Amazon's devices. The role requires deep technical understanding and the ability to analyze complex web service architectures.

DSTS, established in 2014, secures over 100+ device types, 12,000+ applications, and 100+ product lines developed by more than 16,000 builders. You'll be part of an organization that values work-life balance, offering flexible scheduling and a collaborative environment that celebrates knowledge sharing and mentorship.

The ideal candidate will combine technical expertise with excellent communication skills, as you'll be working with teams across all levels of the organization. You'll have the opportunity to develop new tools, automate processes, and contribute to the security of Amazon's global infrastructure. The role offers competitive compensation, comprehensive benefits, and significant career growth opportunities in one of the world's leading technology companies.

This position is perfect for security professionals who are passionate about finding and fixing vulnerabilities, developing security tools, and making a direct impact on customer safety. You'll be part of a diverse, inclusive team that values continuous learning and innovation, with access to the latest technologies and challenges in the security field.