Senior Cloud Security Engineer - AI-Driven Testing Lead

Amazon Inc.; United Kingdom; On-site; GBP 120,000 - 180,000; Full time

Job summary

Amazon is seeking a Senior Security Engineer to join the Point-in-Time Security Testing team. You will lead complex security testing engagements end-to-end, applying human judgment where it matters and building automation for everything else.

You will own testing strategy across interconnected AWS services, conduct advanced pentesting and AI-assisted code reviews, and drive security outcomes with collaboration across developers and security teams.

Qualifications

• Experience in software development in one or more languages (e.g., Java, Python).
• Knowledge of information security design, threat modeling, risk analysis.
• Experience in risk assessment and communicating with operations and business teams.
• 5+ years in professional penetration testing, source code auditing, or competitive security testing.
• Ability to build automation and AI-enabled security tooling.

Responsibilities

• Own security for a portfolio of testing engagements across the team and partner orgs; set testing strategy across microservice architectures and launches.
• Perform penetration testing and AI-augmented source code review of complex AWS software; focus on trust boundaries and attack paths.
• Document conclusions for each risk hypothesis; demonstrate issues or rule out paths with evidence; identify weaknesses beyond the tested scope.
• Lead engagements where the scope is unclear, provide clarity, and define scalable approaches across multiple test paths.
• Trace attack paths across components; demonstrate compound risk that spans boundaries and ownership.
• Produce clear, testable engagement results for non-engineering audiences; document risks and residuals.
• Lead communication with developers and security engineers; validate fixes and drive escalations when needed.
• Build reusable frameworks, Runbooks, and rubrics to scale security testing across problems; tune AI tooling for precision.
• Leave behind mechanisms (fuzzers, detection rules, tooling) and track adoption.
• Set peer-review standards for test plans and reports; ensure extensibility and cost-effectiveness.

Skills

Software development

Java

Python

Penetration testing

Security architecture

Education

Bachelor's degree in Computer Science or related field

Job description

Amazon is seeking a Senior Security Engineer to join the Point-in-Time Security Testing team. You will lead complex security testing engagements end-to-end, applying human judgment where it matters and building automation for everything else.

You will own testing strategy across interconnected AWS services, conduct advanced pentesting and AI-assisted code reviews, and drive security outcomes with collaboration across developers and security teams.