Senior Security Engineer, AWS & AI Security Testing

Amazon Web Services (AWS); Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Amazon Web Services (AWS) is seeking a Senior Security Engineer to lead end-to-end security testing engagements within the Point-in-Time Security Testing team. You will apply human judgment to complex risk scenarios, build automations, and drive improvements across architectures and launches.

You will own testing strategy, run advanced penetration tests, and review code to identify vulnerabilities. You will mentor engineers, shape methodologies, and produce actionable results for stakeholders.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 5+ years in professional penetration testing, source code auditing, bug hunting, or competitive CTF.
• Demonstrated ability to find non-trivial vulnerabilities through offensive testing of web apps and services and through source code review.
• Experience with complex security domains such as networking, isolation, web app security, IAM, or cryptography.
• Experience building and steering AI agents to perform security work and understanding attack on agentic systems.

Responsibilities

• Own security for a portfolio of testing engagements across the team and partner-orgs; set testing strategy across interconnected architectures and campaigns.
• Perform penetration testing and AI-augmented source code review of complex AWS software; direct tooling toward trust boundaries and attack paths.
• Translate risk hypotheses into documented conclusions; demonstrate issues with PoC code or rule out attack paths with evidence.
• Lead ambiguous engagements by clarifying scope, defining approaches, and re-scoping as needed to keep engagements on track.
• Trace attack paths across components; demonstrate compound risk crossing boundaries; keep results comprehensive and actionable.
• Produce clear engagement results, writing for non-engineering audiences; document tests, findings, limitations, and residual risk.
• Lead communication with developers and engineers; validate fixes; embed security testers in development lifecycles when launches require it.
• Build reusable frameworks, runbooks, and rubrics to enable repeatable testing and AI tooling improvements across the team.
• Leave behind reusable mechanisms like fuzzers, detection rules, and documented methodologies to drive future security outcomes.
• Set peer-review bar for the team; review plans, scopes, and reports; ensure extensibility and cost-effectiveness.

Skills

Security testing

Penetration testing

Source code review

Threat modeling

Risk analysis

Security architecture

Automation & AI security

Education

Bachelor's degree in Computer Science or related

Tools

CI/CD tooling

Security testing tools

Job description

Amazon Web Services (AWS) is seeking a Senior Security Engineer to lead end-to-end security testing engagements within the Point-in-Time Security Testing team. You will apply human judgment to complex risk scenarios, build automations, and drive improvements across architectures and launches.

You will own testing strategy, run advanced penetration tests, and review code to identify vulnerabilities. You will mentor engineers, shape methodologies, and produce actionable results for stakeholders.