Senior Security Engineer, Operational Research and Development

Amazon; Greater London; Hybrid; GBP 110,000 - 130,000; Full time

Job summary

Amazon Development Centre (London) Limited is seeking a Senior Security Engineer in the Operational Research and Development team to define autonomous incident response at cloud scale. You will build automated DFIR capabilities, own playbooks, and guide security decisions in collaboration with software engineers to reduce human intervention in security operations.

The role focuses on end-to-end automation, triage through remediation, and mentoring engineers while maintaining a rigorous security

Qualifications

• Experience scripting, programming, and security code reviews in a common language.
• Experience troubleshooting systems, analyzing logs, or automating tasks via CLI tools.
• Experience identifying security issues and risks and developing mitigation plans.
• Experience with industry security vulnerabilities, attack patterns, and remediation techniques.
• Experience as a mentor, tech lead or engineering team lead.

Responsibilities

• Own response playbooks and investigation methodologies for automation platforms.
• Design and implement autonomous incident response workflows from triage to remediation.
• Build automated DFIR capabilities including log correlation and threat eradication at cloud scale.
• Drive security domain decisions while partnering with SDEs on platform scalability.
• Participate in on-call rotation focused on automation health and security escalations.
• Mentor engineers across the team on security expertise and incident response best practices.

Skills

Scripting

Programming

Log analysis

Security automation

Mentorship

Job description

Senior Security Engineer, Operational Research and Development

Job ID: 10525089 | Amazon Development Centre (London) Limited

We are building systems that investigate and remediate security incidents at machine speed, reducing human intervention from triage to eradication to the strict minimum. Join us to define what autonomous incident response looks like at the scale of the world's largest cloud provider.

Amazon Security's Operational Research and Development team combines deep security expertise with software engineering to transform how AWS responds to security events. We don't just build tools for responders; we build the intelligence that replaces manual investigation entirely: automated log dives, DFIR pipelines, fix identification, and autonomous mitigation.

Key job responsibilities

• Own the response playbooks and investigation methodology that power our automation platforms
• Design and implement autonomous incident response workflows: from initial triage through root cause analysis to remediation
• Build automated DFIR capabilities including log correlation, forensic evidence collection, and threat eradication at cloud scale
• Drive the security domain decisions (how to investigate, when to act, what to fix) while partnering with SDEs on platform scalability
• Participate in an on-call rotation focused on maintaining automation health, and security escalations
• Mentor engineers across the team on security domain expertise and incident response best practices

About the team

The Operational Research and Development team sits within Amazon Security. We are a mixed team of Security Engineers and Software Development Engineers who share a single mission: make security incident response so fast and accurate that human involvement becomes a choice, not a necessity.

Our engineers own what they build. Each person carries meaningful end-to-end ownership of production systems, from design through deployment and operational excellence. We prototype rapidly, ship iteratively, and treat every manual step in our response pipelines as a problem to solve permanently.

The team values directness, intellectual honesty, and a bias toward building over discussing. We maintain a flexible, distributed working culture and core collaboration hours that respect personal time.

We are intentional about building an inclusive environment where diverse backgrounds and perspectives drive better security outcomes. Whether your path to security engineering was traditional or not, what matters is your ability to think critically about threats and translate that thinking into systems that act autonomously.

Basic Qualifications

• Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
• Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• Experience working in identifying security issues and risks, and developing mitigation plans
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience as a mentor, tech lead or leading an engineering team

Preferred Qualifications

• Experience generating automated metrics to measure service and program effectiveness and consistency
• Experience in security operations, risk management, and incident response
• Experience designing or building automated security response workflows, playbooks, or orchestration systems (SOAR, custom pipelines, or equivalent)

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.