Senior Security Engineer, Vulnerability Management and Remediation Operations

Amazon develops products and services that transform the way customers live. Across teams and geographies, we strive to delight customers and earn their trust. Members of the Stores Security team are guardians of that trust. From drones to grocery stores and everything in between, our mission is to assess risk, classify data and systems, detect potential intrusion, and respond quickly to security events across Amazon’s critical business functions, including Retail, Customer Service, Worldwide Operations, Consumer Payments, Physical Stores, and Healthcare. Within Stores Security, the Vulnerability Management and Remediation Operations (VMR Operations) organization is responsible for all aspects of the Vulnerability Management lifecycle across Amazon including intake, assessment, discovery, and response.


Key job responsibilities
The VMR Operations organization is looking for a Senior Security Engineer with deep technical expertise in vulnerability management, threat intelligence, and security operations to join us in building and maturing our VMR Operations programs. In this role, you will be responsible for driving the strategic, technical, and engineering direction of the Vulnerability Management Program. You will leverage relationships with engineers across Stores Security, business teams, and leaders throughout Amazon prioritize deliverables, escalate roadblocks, and improve organizational processes. You will build trust with Senior Engineers and leaders by leveraging your technical expertise to understand technical challenges, design improved solutions, and hold a high operational security bar. Finally, you will use your information security expertise to champion and drive risk-based decisions across complex, multi-disciplinary programs to ensure Amazon properly manages security risk.


About the team
Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Mentorship and Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Basic Qualifications

- Experience in industry-based security vulnerabilities identification, attack patterns, and remediation techniques (non-internship)
- 4+ years experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
- 4+ years experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
- 5+ years experience working in identifying security issues and risks, and developing mitigation plans
- Experience as a mentor, tech lead or leading an engineering team

Preferred Qualifications

- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience with security in service-oriented architectures/microservices and web services

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based