Security Engineer, Vulnerability Management and Remediation Operations

Amazon Web Services (AWS); London; On-site; GBP 60,000 - 100,000; Full time

Job summary

A forward-thinking company is seeking a dedicated Security Engineer to join their Vulnerability Management & Remediation Operations team in London. This role is crucial for fortifying defenses by analyzing vulnerabilities, designing automation tools, and enhancing operational capabilities. The ideal candidate will have extensive experience in security engineering and programming, particularly in Python and Java. Join a global team committed to innovation and security, where your contributions will significantly impact the organization's resilience against threats.

Qualifications

• 5 years of security engineering experience in system, network, and/or application security.
• 5 years developing vulnerability assessment tests with Python or Java.
• 3 years troubleshooting networking, operating systems, applications, or cloud services.

Responsibilities

• Analyze public and private vulnerability disclosures and exploit code.
• Support response and remediation efforts, assisting builder teams to fix security issues timely.
• Engineer high-quality, scalable, and accurate vulnerability detection mechanisms.

Skills

Python

Ruby

Go

Swift

Java

.Net

C++

SQL

Networking Protocols

Vulnerability Assessment

Education

Bachelor's degree in Computer Science

Tools

AWS

Job description

Security Engineer, Vulnerability Management and Remediation Operations

Join to apply for the Security Engineer, Vulnerability Management and Remediation Operations role at Amazon Web Services (AWS).

Job Description

Embark on a mission to fortify Amazon's defenses as a Security Engineer with the Vulnerability Management & Remediation Operations team in London, UK. The VMRO team is responsible for discovering, assessing, triaging, detecting, and driving the remediation of vulnerabilities across the Amazon ecosystem.

Key Responsibilities

1. Analyze public and private vulnerability disclosures and exploit code.
2. Understand and assess the technical details and potential impact of vulnerabilities across Amazon's infrastructure, services, and applications.
3. Investigate and triage vulnerabilities, identifying severity and scope of potential impact.
4. Support response and remediation efforts, assisting builder teams to fix security issues timely.
5. Engineer high-quality, scalable, and accurate vulnerability detection mechanisms.
6. Design and implement automation, tools, and workflows to enhance operational capabilities.
7. Participate in a global team and periodic on-call responsibilities for continuous monitoring and remediation.
8. Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++, or similar languages and SQL.

Basic Qualifications

• Bachelor's degree in computer science or equivalent.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++, or similar languages.
• 5 years of security engineering experience in system, network, and/or application security.
• 5 years developing vulnerability assessment tests with Python or Java.
• 5 years improving accuracy of vulnerability detection mechanisms across diverse ecosystems.
• 3 years troubleshooting networking, operating systems, applications, or cloud services.
• 3 years building cloud-based services.

Preferred Qualifications

• Experience with AWS products and services.
• Knowledge in threat modeling, secure coding, identity management, authentication, cryptography, system administration, or network security.

Amazon is an equal opportunities employer committed to diversity and inclusion. We value your passion to discover, invent, and build. Protecting your privacy is a priority; please see our Privacy Notice.