Security Engineer II - Bug Bounty & Threat Intel

AMAZON UK; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

Amazon UK is seeking an experienced security engineer to triage externally disclosed risks and drive remediation across devices and services. You will partner with product and security teams to strengthen the secure software development lifecycle and protect customer trust.

You will analyze vulnerability data, automate workflows, and contribute to the growth of the Bug Bounty and Threat Intelligence programs, working with researchers and internal teams to deliver impactful security improvements.

Qualifications

• Experience with application security frameworks, security code reviews and incident response.
• Knowledge of vulnerabilities, remediation techniques and exploit development practices.
• Experience in scripting or programming in Python, Java or C++ and familiarity with AWS.
• Experience with device technologies, firmware flashing, logs and debugging is a plus.

Responsibilities

• Triage externally disclosed hardware and service security issues, suggest fixes and collaborate with builder teams for remediation.
• Identify risk trends in Amazon devices and services and collaborate with teams for remediation.
• Automate manual security processes to improve efficiency.
• Lead improvements to Amazon security programs and processes.
• Create high-quality documentation for technical and non-technical audiences.
• Manage relationships with customers and security researchers.

Skills

Application security

Security code reviews

Threat modeling

Penetration testing

Cloud security

Python

C++

Java

DevSecOps

Education

Bachelor's degree in a STEM field

Tools

AWS

Linux/Bash

Firmware analysis

Security tooling

Job description

Amazon UK is seeking an experienced security engineer to triage externally disclosed risks and drive remediation across devices and services. You will partner with product and security teams to strengthen the secure software development lifecycle and protect customer trust.

You will analyze vulnerability data, automate workflows, and contribute to the growth of the Bug Bounty and Threat Intelligence programs, working with researchers and internal teams to deliver impactful security improvements.