- Perform penetration testing complex proprietary software and hardware for AWS Gen AI services like Bedrock, Amazon Q, and Code Whisperer.
- Manually audit the source code of web services and software authored in house by Amazon
- Write proof of concept code to demonstrate the severity of a potential security issue
- Provide clear communication on issues to developers that suggest and help to test the fix
- Partner with AWS developers to drive improvement in application security as a result of security review engagements
- Provide actionable long-term risk mitigation guidance to internal and external stakeholder
- Conduct independent vulnerability research pertaining to Gen AI technologies
- A Bachelor's degree in Computer Science, Cybersecurity, Information Security, degree in similar technical field, or equivalent professional experience can be used in lieu of a degree.
- Minimum 2 years of experience in auditing AI/ML systems, models, and frameworks for security vulnerabilities.
- Minimum of 5 years of experience in security testing (Penetration testing, Vulnerability testing, Red teaming, bug hunting, CTF experience, or related field).
- Minimum of 5 years of experience with manually auditing source code (One or more of: Java, Ruby, Python, JavaScript, Rust, C, others) to find security issues.
- Minimum of 5 years of experience scripting in Python or other equivalent interpreted languages.
- Minimum of 5 years of professional experience with 2 or more areas of security engineering practices such as in web application security, network security, authentication and authorization protocols, cryptography, automation and other software security disciplines.
- Experience with AWS AI technologies and services (e.g. SageMaker, Code Whisperer, Bedrock, etc).
- Experience testing and securing distributed systems at AWS scale.
- Experience with the architecture of GenAI models, platforms, and applications.
- Knowledge of common AI/ML attack techniques such as prompt injection and ability to automate testing for these vulnerabilities.
- Ability to identify vulnerabilities and threats specific to GenAI and other AI/ML systems.
- Background in adversarial machine learning and emerging attacks like data poisoning, model extraction, membership inference, etc.
- Experience with languages commonly used in AI/ML like Python, R, Java, C++.
- Meets/exceeds Amazon's leadership principles for this role.
- Meets/exceeds Amazon's functional/technical depth and complexity expectations for this role.
-
Senior Security Engineer
1 week ago
Amazon Development Center U.S., Inc. Seattle, United States Full time· Do you relish the challenge of threat modeling, fortifying the defenses of artificial intelligence and cloud systems? Does identifying customer security expectations for AI systems and influencing builders to embrace secure-by-default practices, making the secure path the easy ...
-
Field Design Engineering
5 days ago
OSI Engineering Seattle, WA, United StatesField Design Engineers for a Global Consumer Device company in (Seattle, WA) · Responsibilities: · You will test cellular technologies in the field, perform log analysis and debug issues. · You will be driven to locations up to 30 minutes from the lab to test cellular technologie ...
-
RN Fellowship
3 days ago
Swedish Health Services Pioneer Square, United StatesDescription · Swedish is seeking applicants for our July 2024 RN MedSurg Fellowship . An RN Fellowship with Swedish will provide the foundation and support essential to becoming an expert in your new specialty. Learn through a combination of structured curriculum, simulation, and ...
-
Vice President
1 week ago
Zenoti Seattle, United StatesZenoti provides an all-in-one, cloud-based software solution for the beauty and wellness industry. Our solution allows users to seamlessly manage every aspect of the business in a comprehensive mobile solution: online appointment bookings, POS, CRM, employee management, inventory ...
-
Senior Director, Product Management
2 weeks ago
Oracle Seattle, United States Regular EmployeeAt Oracle Cloud Infrastructure (OCI), we build the future of the cloud for Enterprises as a complementary team of fellow creators and inventors. We act with the speed and demeanor of a start-up, with the scale and customer-focus of the leading enterprise software company in the w ...
-
Manager, Network Development, GCNA
4 weeks ago
Amazon Data Services, Inc. Seattle, United States Full timeOur engineers, managers and leaders are innovators at heart; come join us and become integral to the technology company that is the past, present and future of real Cloud Computing. · AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global ...
-
Cortex Systems Engineer Specialist
3 weeks ago
Palo Alto Networks Seattle, United StatesAs a Systems Engineering Specialist for Cortex, a Next-Gen AI-powered security operations platform, you will be the expert for our Cortex portfolio with a focus on our Northeast Healthcare accounts. Your portfolio includes Cortex XDR (Extended Detect Systems Engineer, Specialist, ...
-
Regional Sales Manager
4 days ago
ExtraHop Networks Seattle, United StatesExtraHop Networks, Inc. · ExtraHop is on a mission to protect and propagate trust by revealing the cybertruth: the truth about the attackers already inside an organizations network, the truth about what theyre doing, and how to stop them at top speed. We partner with every custo ...
-
Enginnering Manager
3 weeks ago
Keywords Studios Plc. Seattle, United StatesEngineering Manager, Games · We seek an Engineering Manager to manage, train, and lead a talented team of engineers to tackle a variety of projects across many platforms. You will work closely with team members who are excited to grow their careers and continue to launch engaging ...
-
Senior Systems Software Engineer
1 week ago
Providence Digital Innovation Group Seattle, United StatesProvidence · is one of the largest not-for-profit health systems in the United States. · At Providence, we use our voice to advocate for vulnerable populations and health care reforms. We pursue innovative ways to transform health care by keeping people healthy, and making our s ...
-
Cortex Systems Engineer Specialist
10 hours ago
Palo Alto Networks Seattle, United StatesCompany Description · Our Mission · At Palo Alto Networks everything starts and ends with our mission: · Being the cybersecurity partner of choice, protecting our digital way of life. · Our vision is a world where each day is safer and more secure than the one before. We are a ...
-
Sr. Channel Account Manager
2 weeks ago
Abnormal Security Seattle, United StatesJob Description · Job DescriptionAbout the roleAbnormal Security is looking for a Channel Account Manager in the Northwest region to join our Channel Management Team. The team leverages channel partners to drive growth and sales productivity. They drive collaboration and engageme ...
-
Amazon Seattle, United StatesAmazon launched the Generative AI Innovation Center (GAIIC) in Jun 2023 to help AWS customers accelerate enterprise innovation and success with Generative AI ). GAIIC provides opportunities to innovate in a fast-paced organization that contributes to game-changing projects and te ...
-
Principal Software Engineer
1 week ago
Fossbytes Media Pvt Ltd Seattle, United StatesCompute, networking, storage, DB, Security, Observability are the key services for any IaaS offering. Security and Observability are cross-cutting concerns and enable the whole ecosystem to provide the world's most secure cloud platform. Observability services are foundational wi ...
-
Regional Sales Manager
1 week ago
BigID Seattle, United StatesWho we are: · BigID is an innovative tech startup that focuses on solutions for data security, compliance, privacy, and governance. We're leading the market in all things data: helping our customers reduce risk, drive business innovation, achieve compliance, build customer trust ...
-
Post-Doctoral Research Fellow
2 weeks ago
Fred Hutchinson Cancer Research Center Seattle, United StatesFred Hutchinson Cancer Center is an independent, nonprofit organization providing adult cancer treatment and groundbreaking research focused on cancer and infectious diseases. Based in Seattle, Fred Hutch is the only National Cancer Institute-designated cancer center in Washingto ...
-
Senior Director, Product Management
20 hours ago
Mygwork - Lgbtq+ Business Community Seattle, United StatesAt Oracle Cloud Infrastructure (OCI), we build the future of the cloud for Enterprises as a complementary team of fellow creators and inventors. We act with the speed and demeanor of a start-up, with the scale and customer-focus of the leading enterprise software company in the w ...
-
Tax Manager
2 weeks ago
Carta Seattle, United StatesThe Company You'll Join · Carta is a platform that helps people manage equity, build businesses, and invest in the companies of tomorrow. Our mission is to unlock the power of equity ownership for more people in more places. · Carta is trusted by more than 40,000 companies and ...
-
Principal Software Engineer
3 days ago
Oracle Seattle, United StatesJob Description · Compute, networking, storage, DB, Security, Observability are the key services for any IaaS offering. Security and Observability are cross-cutting concerns and enable the whole ecosystem to provide the world's most secure cloud platform. Observability services ...
-
Software Reliability Engineer
1 week ago
Anduril Industries Seattle, United StatesAnduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century's most innovative companies to the defense industry, Anduri ...
Senior Penetration Testing Engineer, AWS Gen AI Security - Seattle, United States - Amazon
Description
Do you enjoy finding unique security flaws in artificial intelligence and cloud systems? Do you enjoy protecting customers by securing AI and AWS services at scale? Do you enjoy mentoring and leading engineers to solve complex security problems in cutting-edge technologies? On the AWS Gen AI security team, as a Senior Security Engineer you will be responsible for the delivery of continuous assessments. You will be asked to solve complex technology problems, build tools to automate your way out of manual efforts, and influence the way Amazon services, primarily Gen AI services respond to and mitigate threats.
Our team is responsible for manually evaluating the security of all Gen AI products, services and software released by AWS. We specialize in uncovering subtle vulnerabilities that automated tools miss, and develop custom tooling to scale our security efforts across Amazon's expanding Gen AI landscape. The AWS surface area is large and diverse, and we use insights from manual testing to continually improve our focused automation to proactively identify and fix potential issues before customers are impacted.
We are looking for a Senior Penetration Testing Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for application and/or hardware penetration testing. You will be responsible for automating repetitive tasks using various scripting languages. You will be responsible for mentoring and leading other engineers to deliver complex penetration tests and vulnerability assessments. You will be expected to drive automation, tooling, efficiency and advance the teams penetration testing capabilities. You will be responsible for influencing Amazon services through the creation of threat mitigation plans. You will work directly with internal teams to solve challenging software and security problems.
Key job responsibilities
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.
Why Amazon Security
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.
Inclusive Team Culture
In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training and Career growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
We are open to hiring candidates to work out of one of the following locations:
Arlington, VA, USA | Atlanta, GA, USA | Austin, TX, USA | Herndon, VA, USA | San Diego, CA, USA | San Francisco, CA, USA | Seattle, WA, USA | Virtual Location - USA
Basic Qualifications
Preferred Qualifications
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit This position will remain posted until filled. Applicants should apply via our internal or external career site.