Security Engineer, Vulnerability Management and Remediation Operations

In this role you help strengthen Amazon’s security by discovering, assessing, and driving remediation of vulnerabilities across our infrastructure and services. You will work with a global team to triage disclosures, design automated detection methods, and support builders in fixing issues quickly. This position offers exposure to a broad ecosystem and hands-on opportunities to shape vulnerability management at scale.

• training and career growth
• inclusive DEI events and learning experiences
• work-life balance and flexible working culture
• mentorship and knowledge sharing
• opportunities to work across cloud, devices, retail, entertainment, and more
• Earth’s Best Employer aspirations

• Analyse vulnerability disclosures and exploit code (public and private)
• Assess technical impact of vulnerabilities across Amazon’s infrastructure, services, and applications
• Investigate and triage vulnerabilities, determine severity and potential impact
• Support remediation efforts by guiding builder teams to fix security issues promptly
• Engineer scalable vulnerability detection mechanisms
• Design and implement automation, tools, and workflows to enhance operations
• Participate in on-call rotations for continuous monitoring and remediation

• 5 years security engineering experience in system, network, and/or application security
• 5 years experience developing vulnerability assessment tests with Python or Java
• 5 years experience improving accuracy of vulnerability detection mechanisms across a diverse technical ecosystem
• 3 years experience troubleshooting networking, operating systems, applications, or cloud services
• Bachelor's degree in computer science or equivalent
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP

• collaborative
• curious
• ability to work in a global team
• Python or Java for vulnerability assessment
• security engineering across systems, networks, and applications
• vulnerability detection and remediation