Junior Penetration Testing Engineer

Join Amgen’s Mission of Serving Patients

At Amgen, if you feel like you’re part of something bigger, it’s because you are. Our shared mission—to serve patients living with serious illnesses—drives all that we do.

Since 1980, we’ve helped pioneer the world of biotech in our fight against the world’s toughest diseases. With our focus on four therapeutic areas –Oncology, Inflammation, General Medicine, and Rare Disease– we reach millions of patients each year. As a member of the Amgen team, you’ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives.

Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you’ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.

Junior Penetration Testing Engineer

What you will do

Let’s do this. Let’s change the world. In this vital role has a strong focus on ensuring the organization's infrastructure, applications, and systems are secure from external and internal threats. This role is responsible for conducting authorized security tests on IT infrastructure to evaluate the strength of its systems against potential cyberattacks. A variety of automated tools and manual techniques are leveraged to simulate real-world attacks. The penetration tester then works with the organization to prioritize, remediate and report on identified issues, strengthening the overall security posture.

Roles & Responsibilities:

• Assist in penetration testing and security assessments under the supervision of senior engineers.  

• Document findings, providing clear and actionable remediation recommendations.  

• Identify and report vulnerabilities in applications, networks, cloud environments, and infrastructure.  

• Perform hands-on exploitation techniques to validate security weaknesses.  

• Use automated security tools (e.g., Burp Suite, OWASP ZAP, Metasploit, Nmap) and manual testing techniques to identify vulnerabilities.  

• Research emerging cybersecurity threats and contribute to the improvement of penetration testing methodologies.  

• Collaborate with development and security teams to implement secure coding practices and security best practices.  

• Participate in adversarial simulations, red team and purple team exercises as part of security assessments.  

• Support security compliance efforts aligned with industry frameworks (e.g., NIST, ISO 27001, PCI-DSS).  

• Continuously learn and improve technical skills in ethical hacking, scripting, and exploit development. 

What we expect of you

We are all different, yet we all use our unique contributions to serve patients.

Master’s degree and 1 to 3 years of experience in Cybersecurity or information security operations OR

Bachelor’s degree and 3 to 5 years of experience in Cybersecurity or information security operations OR

Diploma and 7 to 9 years of experience in Cybersecurity or information security operations

Must-Have Skills:

• Basic knowledge of penetration testing methodologies (e.g., PTES, OWASP Testing Guide).  

• Understanding of network application security, application security, and cloud security.  

• Familiarity with OWASP Top 10, SANS Top 25, and common attack techniques.  

• Experience using security tools such as Burp Suite, Nmap, OWASP ZAP, and Metasploit.  

• Basic proficiency in scripting and automation (e.g., Python, Bash, PowerShell). 

Preferred Qualifications:

Good-to-Have Skills:

• Experience with threat intelligence and adversary simulation.

• Basic knowledge of secure coding practices and defensive security measures.

• Interest in red teaming, social engineering, and cloud security testing.

• Preferred: eJPT (Junior Penetration Tester)

Soft Skills:

• Curiosity & Continuous Learning – Passion for cybersecurity research and ethical hacking.

• Analytical Thinking – Ability to identify patterns and security weaknesses.

• Communication Skills – Ability to document findings and present them effectively.

• Collaboration & Teamwork – Works well in a team-oriented environment, learning from senior testers.

• Attention to Detail – Precision in identifying vulnerabilities and reporting them clearly.

• Problem-Solving Mindset – Ability to analyze and troubleshoot security risks effectively.

What you can expect of us

As we work to develop treatments that take care of others, we also work to care for your professional and personal growth and well-being. From our competitive benefits to our collaborative culture, we’ll support your journey every step of the way.

In addition to the base salary, Amgen offers competitive and comprehensive Total Rewards Plans that are aligned with local industry standards.

Apply now and make a lasting impact with the Amgen team.

careers.amgen.com

As an organization dedicated to improving the quality of life for people around the world, Amgen fosters an inclusive environment of diverse, ethical, committed and highly accomplished people who respect each other and live the Amgen values to continue advancing science to serve patients. Together, we compete in the fight against serious disease.

Amgen is an Equal Opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, or any other basis protected by applicable law.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.