A

Amazon

Sells products online and rents cloud computing

Mobile Security Engineer - Application Security

Offensive Security & TestingUpdated on Nov 8
Full-timeRemote

About the Job

Requirements

  • A bachelor's degree in computer science or equivalent is required.
  • At least 3 years of experience in penetration testing or a similar offensive security role is required.
  • At least 3 years of experience in client-side application security, including reverse engineering and security assessments, is required.
  • At least 3 years of professional experience with security engineering practices, including web application security, authentication and authorization protocols, cryptography, automation, and other software security disciplines, is required.
  • At least 3 years of experience with dynamic and manual code auditing to identify security issues is required.
  • At least 3 years of experience with interpreted or compiled languages such as Python, Ruby, C/C++, Java, or .NET is required.
  • Experience with threat modeling, design review, or other threat analysis techniques is required.
  • Proficiency with binary analysis tools such as Ghidra, IDA Pro, Radare2, Hopper, or Jadx is required.
  • Experience with client-side application instrumentation and dynamic testing tools such as Frida, Objection, LLDB, or Burp Suite is required.

Responsibilities

  • Conduct high-quality application penetration tests independently or as part of a team.
  • Create detailed engagement plans and thoroughly document findings, gaps, and remediation recommendations.
  • Contribute to team tooling, innovation, and improvements.
  • Communicate and collaborate with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive resolution of discovered security findings.

Desired Qualifications

  • Knowledge of cloud services such as AWS or equivalent.
  • Experience with the design, implementation, support, and evaluation of security-focused tools and services.
  • Experience with mobile application penetration testing.
  • Familiarity with threat models for client-side applications on consumer devices and vulnerability classes specific to their platforms and communication protocols.
  • Experience mentoring developers on secure coding practices and vulnerability mitigations.
  • Experience in CTF competitions, CVE research, and/or Bug Bounty recognition.

About the Company

Amazon

Sells products online and rents cloud computing

Amazon runs the largest online store in the United States and rents cloud computing to businesses and governments through Amazon Web Services. AWS pioneered renting computing power over the internet, and Amazon built its own delivery network to get orders to customers quickly. Shoppers buy from Amazon and from independent sellers on its store, and Prime members pay a subscription for fast free shipping, streaming video and music, and other perks. AWS rents out computing power, storage, databases, and AI tools so companies can run software without owning servers, and Amazon also makes Kindle e-readers and Echo speakers with the Alexa assistant. Jeff Bezos founded Amazon in 1994, and it is based in Seattle, Washington.

Company size
10,001+
Company stage
IPO
Headquarters
Seattle, WA
Founded
1994

Recently Posted Jobs

Explore more opportunities at Amazon

See more jobs