Senior Security Engineer, ReSec Red Team

Amazon; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Senior Security Engineer to join their ReSec Red Team. This role focuses on database security, ensuring that services meet the highest security standards. You will conduct security research, vulnerability assessments, and penetration testing while collaborating with various teams to enhance the security posture of cloud services. If you have a passion for security and a strong background in software security, this is an exciting opportunity to contribute to innovative security solutions in a dynamic environment.

Qualifications

• 6+ years of experience in software security, including vulnerability research.
• Experience with relational databases focusing on user and role management.
• 4+ years working in a Linux environment.

Responsibilities

• Conduct security research, vulnerability assessments, and penetration testing.
• Design and implement security controls for cloud services.
• Collaborate with teams to enhance security posture.

Skills

Vulnerability Research

Penetration Testing

Database Security

Scripting Languages (Shell, Python, Perl)

Security Incident Management

Education

Bachelor's Degree in Computer Science

Tools

MySQL/MariaDB

PostgreSQL

AWS

Linux

Job description

Senior Security Engineer, ReSec Red Team

AWS Utility Computing (UC) provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2), to new product releases that set AWS apart in the industry. As part of the UC organization, you’ll support the development and management of Compute, Database, Storage, Internet of Things (IoT), Platform, and Productivity Apps services in AWS. Within AWS UC, Amazon Dedicated Cloud (ADC) roles engage with customers requiring specialized security solutions for their cloud services.

The ReSec Red Team participates in security research, penetration testing, threat modeling, and design. We are seeking a Senior Security Engineer with a focus on database security to ensure our services and applications adhere to the highest security standards. Passion for security, vulnerability research, and database technologies is essential.

Responsibilities

• Conduct security research, vulnerability assessments, and penetration testing.
• Design and implement security controls for cloud services.
• Collaborate with teams to enhance security posture.

Qualifications

• 6+ years of experience in software security, including vulnerability research and penetration testing.
• Bachelor’s degree in Computer Science or related field, or equivalent work experience.
• 4+ years working in a Linux environment.
• 4+ years experience with scripting languages (Shell, Python, Perl).
• 3+ years experience with relational databases, focusing on user and role management, authentication, authorization, and network protocols.
• Experience with database engines such as MySQL/MariaDB or PostgreSQL.
• Experience with AWS or similar cloud platforms.
• Knowledge of full-stack Linux/Unix architectures.
• Working knowledge of C/C++.
• Experience managing security incidents and threat response.

Additional qualities include a passion for security research, participation in security competitions or bug bounty programs, domain expertise in security architecture, communication security, IAM, cryptography, or software security, and a data-driven approach to supporting ideas with evidence.