Security Engineer, Vulnerability Management and Remediation Operations
Core
Analyze and triage vulnerabilities across Amazon's infrastructure, services, and applications; engineer scalable detection mechanisms and automation tools to drive remediation.
Role type
Senior IC security engineer (vulnerability management)
Builds
Scalable vulnerability detection mechanisms, automation tools, and workflows
Domain
Cloud security, network security, application security
Deliverable
production ML models
Required skills
Vulnerability assessment, exploit code analysis, Python, Go, Java, C++, networking protocols (HTTP, DNS, TCP/IP), cloud services, system/network/application security
Preferred skills
AWS products, threat modeling, secure coding, identity management, cryptography, software development
Technologies
Python, Java, Go, Swift, .Net, C++, AWS
Responsibilities
Analyze public and private vulnerability disclosures and exploit code; Investigate and triage vulnerabilities, identifying severity and scope; Support response and remediation efforts for builder teams; Engineer high quality, scalable, and accurate vulnerability detection mechanisms; Design and implement automation, tools and workflows; Participate in periodic on-call responsibilities for continuous monitoring.
Seniority
Senior, hands-on IC