Security Engineer II: Lead Bug Bounty & Threat Intel Remote

Amazon; City Of London; Remote; GBP 120,000 - 150,000; Full time

Job summary

Amazon is seeking a security professional to work with external researchers and Amazon teams to secure public-facing devices and services. You will remediate vulnerabilities with urgency and drive Threat Intelligence and Bug Bounty programs to new heights.

You will engage with teams across business verticals, learning how Amazon operates and using that knowledge to improve customer trust and security across the company.

Qualifications

• Experience with security frameworks and incident response.
• Knowledge of vulnerabilities, remediation techniques and exploit development.
• Experience in scripting or security code reviews in Python/Java or similar.
• Hands-on with device technologies, firmware flashing, and logs reading.

Responsibilities

• Triage externally disclosed hardware and service security issues and collaborate on fixes.
• Identify risk trends in Amazon devices and services for remediation.
• Automate manual security processes to improve efficiency.
• Lead improvements to Amazon security programs and processes.
• Write clear, high-quality documents for technical and non-technical audiences.
• Manage relationships with customers and security researchers.

Skills

Application security

Threat modeling

Penetration testing

AWS experience

Scripting (Python/Java)

Device security

Education

Bachelor's degree in STEM

Tools

AWS

Job description

Amazon is seeking a security professional to work with external researchers and Amazon teams to secure public-facing devices and services. You will remediate vulnerabilities with urgency and drive Threat Intelligence and Bug Bounty programs to new heights.

You will engage with teams across business verticals, learning how Amazon operates and using that knowledge to improve customer trust and security across the company.