Security Engineer II, Specialized Businesses Security

Amazon; Greater London; On-site; GBP 60,000 - 110,000; Full time

Job summary

Amazon is seeking an experienced security engineer focused on hardware and software security for devices and services. You will triage vulnerabilities, coordinate remediation with cross-functional teams, and help mature threat intelligence programs.

Required are strong skills in threat modeling, secure coding, and experience with AWS, Python, Java, and firmware analysis. This is a senior role in a security-focused environment at Amazon.

Qualifications

• Experience in multiple security domains including threat modeling and secure coding.
• Strong knowledge of system security vulnerabilities, testing, and remediation.
• Proficient in scripting or programming in Python, Java, or C++.
• Experience with AWS products and services.
• Familiarity with device technologies, firmware, and logs.
• Deep understanding of hardware security and low-level programming.
• BS in a STEM field; 5+ years in security-related roles.
• Experience supporting Red Team, Penetration Testing, or Bug Bounty programs.

Responsibilities

• Triage hardware and service security issues; coordinate remediation with builder teams.
• Identify risk trends in devices and services; drive remediation with teams.
• Automate manual security processes and improve programs.
• Lead improvements to security programs and processes.
• Produce high-quality documentation for technical and non-technical audiences.
• Manage relationships with customers and security researchers.

Skills

Security frameworks

Security code reviews

Incident response

Secure infrastructure

Penetration testing

Mobile security

Cloud security

Threat modeling

Cryptography

Threat intelligence

Secure software development

Python

Java

C++

Device debugging

Scripting

Education

Bachelor's degree in STEM

Tools

AWS

Bash

Java

Python

Perl

Ruby

Firmware

Hardware

Job description

Salary: £60,000 - 110,000 per year

Requirements:

• Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
• Experience with AWS products and services
• Experience working with device technologies under development, familiarity with flashing firmware, basic device debugging and familiarity with reading/pulling device logs, or experience scripting in one or more language (e.g. Bash, Python, Perl, Ruby)
• Deep understanding of hardware security, firmware analysis, operating system internals, and low-level programming
• Bachelors degree in a STEM field (Science, Technology, Engineering, Mathematics)
• 5+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Experience supporting Red Team, Penetration Testing, or Bug Bounty programs

Responsibilities:

• Triage externally disclosed hardware and service security issues, suggest fixes, and collaborate with builder teams for remediation
• Identify risk trends in Amazon devices and services, and collaborate with builder teams for remediation
• Automate manual processes to streamline security work
• Lead improvements to Amazon programs and processes
• Write and deliver high-quality documents for technical and non-technical audiences
• Manage relationships with customers and security researchers

Technologies:

• AI
• AWS
• Bash
• Cloud
• Cryptography
• Firmware
• Hardware
• Java
• Mobile
• Network
• Perl
• Python
• Ruby
• Security
• Support

More:

We work with external security researchers and Amazon teams to secure Amazons public-facing devices and services. In this role, we focus on remediating vulnerabilities with urgency and using what we learn through disclosure and mitigation to improve the security of Amazons device and software development life cycle. We offer challenging leadership and technical opportunities, the chance to grow our Bug Bounty and Threat Intelligence programs, and direct exposure to a variety of business verticals across Amazon. You will work closely with highly skilled security engineers in an environment centered on customer trust, security, and customer obsession. Amazon is an equal opportunities employer and values a diverse, inclusive culture.

last updated 37 week of 2026