Security Engineer II — Bug Bounty & Threat Intelligence

Amazon; Greater London; On-site; GBP 110,000 - 170,000; Full time

Job summary

Amazon Development Centre (London) Limited seeks a security engineering expert to collaborate with external researchers and Amazon teams to secure public-facing devices and services. You will triage disclosed risks and drive urgent remediation across the lifecycle.

You’ll partner with various business units to learn how Amazon operates, apply technical skills to improve customer trust, and contribute to Threat Intelligence and Bug Bounty programs with a customer-obsessed mindset.

Qualifications

• Experience with security frameworks, incident response, and threat modeling.
• Knowledge of vulnerabilities, remediation techniques, and exploits.
• Experience with AWS products and services.
• Experience programming in Python, Java, or C++.

Responsibilities

• Triage externally disclosed hardware and service security issues, suggest fixes, and collaborate with builder teams for remediation.
• Identify risk trends in Amazon devices and services, and collaborate with builder teams for remediation.
• Automate manual security processes to streamline work.
• Lead improvements to Amazon security programs and processes.
• Write and deliver high-quality documents for technical and non-technical audiences.
• Manage relationships with Customers and security researchers.

Skills

Application security

Penetration testing

Secure coding

AWS experience

Device security

Low-level programming

Education

Bachelor's degree in STEM

Tools

Python

Java

C++

AWS

Firmware debugging

Job description

Amazon Development Centre (London) Limited seeks a security engineering expert to collaborate with external researchers and Amazon teams to secure public-facing devices and services. You will triage disclosed risks and drive urgent remediation across the lifecycle.

You’ll partner with various business units to learn how Amazon operates, apply technical skills to improve customer trust, and contribute to Threat Intelligence and Bug Bounty programs with a customer-obsessed mindset.