Security Support Engineer, Vulnerability Management and Remediation Operations

Amazon UK Services Ltd.; London; On-site; GBP 45,000 - 70,000; Full time

Job summary

Join Amazon's Security team as a Security Support Engineer specializing in Vulnerability Management in London. You'll assess vulnerabilities, drive remediation efforts, and support continuous monitoring. Ideal candidates will have a technical degree or equivalent tech experience, a deep understanding of security concepts, and a passion for technology.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 2+ years of experience in security roles.
• Passion for continuous learning in a dynamic environment.

Responsibilities

• Support vulnerability campaigns and work with Campaign Owners.
• Collaborate with teams to remediate critical vulnerabilities.
• Contribute to automation of repetitive tasks.

Skills

Security concepts

Risk understanding

Knowledge sharing

Education

Bachelor's degree in Computer Science

Bachelor's degree in Cybersecurity

Tools

AWS Config

CloudTrail

IAM

Linux/Unix tools

Job description

Social network you want to login/join with:

Security Support Engineer, Vulnerability Management and Remediation Operations, London

col-narrow-left

Client:

Amazon UK Services Ltd.

Location:

London, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

3807dd551eef

Job Views:

33

Posted:

24.06.2025

Expiry Date:

08.08.2025

col-wide

Job Description:

Embark on a Mission to Fortify Amazon's Defenses as a Support Engineer with the Vulnerability Management & Remediation Operations team!

Amazon Security is seeking an experienced and innovative Support Engineer specialising in cybersecurity to join our Vulnerability Management and Remediation Operations (VMRO) team in London, UK. The VMRO team is a global team that is responsible for assessing, detecting, and driving the remediation of vulnerabilities across the Amazon ecosystem.

Key job responsibilities
Support vulnerability detection campaigns by working closely with Campaign Owners to launch and continuously improve the quality of campaigns across Amazon.
Assess and negotiate with customers to drive down security risk by engaging with teams to remediate critical security vulnerabilities in their environments.
Collaborate with builder teams to implement security fixes and improvements.
Understand technical details of vulnerabilities affecting Amazon's infrastructure, services, and applications.
Review and analyse common vulnerability disclosures and assist in evaluating potential impacts.
Help triage vulnerabilities and contribute to impact and detection logic assessments.
Contribute to the development of automation of repetitive tasks.
Actively participate in updating documentation and sharing knowledge across your global peers.
Participate in an on-call rotation to support continuous monitoring and remediation of vulnerabilities.

BASIC QUALIFICATIONS

- Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, Cybersecurity or related technical degree or equivalent; or 2+ years equivalent technology experience
- Strong understanding of security concepts with a security mindset.
- Strong understanding of computer and network weaknesses and mitigating controls.
- Strong ability to understand risk and prioritisation in the context of the business.
- Ability to communicate effectively within technical and business settings.
- Ability to document learnings and contribute to knowledge sharing and runbook building.
- Experience with secure-cloud configuration, (CloudTrail, AWS Config), cloud-security technologies (VPC, Security Groups, WAF etc.), and cloud-permission systems (IAM).
- Experience with identity and access concepts, with technologies to secure production and corporate access, (SSO, SAML) and with Federated Identity, RBAC, authentication and authorisation solution, encryption, SSL, and related.

PREFERRED QUALIFICATIONS

- 1+ year's of experience in fields such a Security Operations, technology audit, or security vulnerability lifecycle.
- Ability to prioritise multiple tasks and projects.
- Have a passion to learn and thrive in a dynamic and constantly changing environment.
- Experience with virtualisation technologies, especially with AWS services.
- Relevant industry certifications such as CISSP, SANS, ISC2, CompTia, etc.
- Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills.
- Demonstrated knowledge of web protocols, common attacks, and working knowledge of Linux/Unix tools and architecture.
- Understanding of best practices across multiple security disciplines/domains.
- Demonstrated ability to work autonomously with a Bias for Action, critical and creative thinking.
- Demonstrated ability to collaborate, develop partnerships, and work effectively as a member of a global, inclusive team.