Senior Security Engineer, Annapurna Labs

Amazon; London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A leading company is seeking a Senior Security Engineer to enhance security across hardware platforms and software. The role involves leading vulnerability research, mentoring teams, and developing automated security testing solutions. Candidates should have extensive experience in security engineering and vulnerability testing.

Qualifications

• At least 8 years of experience in vulnerability testing and auditing techniques.
• Deep knowledge of embedded systems, operating systems, and hardware security.

Responsibilities

• Lead security reviews of large projects and set standards for AWS Security teams.
• Provide expert advice on technical and business security issues.

Skills

Vulnerability Testing

Penetration Testing

Mentoring

Security Engineering

Teamwork

Education

Computer Science

Electrical Engineering

Tools

C

C++

Assembly

Python

Ruby

Perl

Job description

Senior Security Engineer, Annapurna Labs

Annapurna Labs is seeking a Senior Security Engineer to secure our hardware platforms, software, and devices against emerging threats.
You will be responsible for security assurance, influencing design and implementation, developing threat models, and reviewing solutions and mitigations. The role involves leading vulnerability research, penetration testing, and developing automated security testing solutions such as fuzzing, static analysis, and other security checkers. Mentoring service teams to incorporate security testing into their development processes is also a key responsibility.

Key Responsibilities

• Lead security reviews of large projects and set standards for AWS Security teams.
• Provide expert advice on technical and business security issues.
• Share knowledge across Amazon and lead security initiatives.
• Balance security and business goals with sound judgment.
• Mentor and train engineers across AWS.

Minimum Qualifications

• At least 8 years of experience in vulnerability testing and auditing techniques.
• Experience with red teams or Capture The Flag (CTF).
• Deep knowledge of embedded systems, operating systems, ARM, SOC, hardware, and silicon security.
• Familiarity with hypervisor technologies like KVM and Xen.
• Proficiency in creating threat models and recommending mitigations.
• Experience with programming (C, C++, Assembly) and scripting languages (Python, Ruby, Perl).
• Experience developing security tools such as fuzzers and checkers.
• Strong understanding of security engineering, network security, cryptography, and application security.
• Familiarity with AWS services.
• Security training, outreach, and documentation skills.
• Experience with reverse engineering and driving large initiatives.
• Teamwork, analytical skills, and alignment with Amazon leadership principles.
• Educational background in Computer Science/Electrical Engineering or equivalent experience.

Our inclusive culture empowers employees to deliver exceptional results. For workplace accommodations during the application process, visit https://amazon.jobs/content/en/how-we-hire/accommodations. If your region isn't listed, contact your Recruiting Partner.