Jobs · Quality Assurance

Sr. Engineer, Red Team, Bots & DDoS Threat Intelligence

Ring · Colorado, United States · 1 wk ago
RemoteRemoteQuality AssuranceFull-time

Description

Application deadline: Jul 12, 2026
Amazon Traffic Engineering seeks a Senior Red Team Security Engineer to lead a new offensive security team focusing on bot mitigation and DDoS defense. The role involves designing and executing adversarial simulations against Amazon's internet-facing infrastructure, protecting billions of customer requests.

Key job responsibilities

  • Design and execute red team engagements targeting bot detection platforms, WAFs, CDN protections, and DDoS mitigation services
  • Develop and maintain custom offensive tooling — anti-detect browser automation, TLS fingerprint manipulation (JA3/JA3S), Canvas/WebGL evasion, and behavioral replay systems
  • Research and simulate emerging AI-driven attack vectors including autonomous browsing agents, LLM-powered bots, and agentic scraping techniques
  • Mentor junior engineers on tradecraft, engagement methodology, and responsible offensive operations
  • Collaborate with detection engineering teams to translate findings into measurable defensive improvements; author detailed technical reports with actionable remediation guidance

Basic Qualifications

  • 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
  • 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
  • Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
  • Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques

Preferred Qualifications

  • Experience applying threat modeling or other risk identification techniques or equivalent
  • 5+ years of experience in offensive security, red teaming, or penetration testing
  • Deep hands-on expertise in web application security, bot evasion techniques, or DDoS attack methodologies
  • Experience with anti-detect browser frameworks (Nodriver, Puppeteer Stealth, Playwright)
  • Familiarity with LLM-based automation and AI agent architectures

About the role

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Benefits

Amazon offers comprehensive benefits including health insurance, 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

Similar jobs