Pentest Security Engineer, Devices & Services Pentesting

Amazon's Devices and Services Trust & Security (DSTS) team is seeking an experienced Pentest Security Engineer to join their penetration testing team. This role focuses on detecting and exploiting vulnerabilities across Amazon's consumer services, devices, and Kuiper satellites. The position involves conducting in-depth security reviews of complex service workflows, including authentication mechanisms, AI systems, mobile applications, and web service APIs.

The ideal candidate will join a dedicated team of penetration testers working to secure Amazon's vast ecosystem of devices and services. This includes over 100+ device types, 12,000+ services, and 100+ product lines developed by more than 16,000 builders. The role offers an exciting opportunity to impact Amazon's security landscape while working with cutting-edge technologies.

Key responsibilities include performing penetration testing, identifying high-impact security vulnerabilities, and providing actionable guidance for remediation. The position requires strong technical skills in web security, code review, and system architecture understanding. You'll work closely with builder teams, develop proof of concept exploits, and validate security patches.

The team values work-life balance and offers flexible scheduling options. They foster an inclusive culture that celebrates knowledge sharing and mentorship, with opportunities for career growth and skill development. The position offers competitive compensation ranging from $125,500 to $212,800 based on location and experience, plus comprehensive benefits.

This is an excellent opportunity for security professionals passionate about finding and fixing vulnerabilities, developing security tools, and protecting millions of Amazon customers. The role combines technical challenges with meaningful impact, making it ideal for those interested in large-scale security operations and innovation in consumer technology.