Security Engineer-Pentest, Continuous Security Testing

• Join AWS Continuous Security Testing as a Security Engineer focused on penetration testing, working remotely from the UK. • Think like an adversary against AWS systems running in production. • Follow real-world signals such as threat intelligence and scanner output to decide where testing matters most. • Pair deep human expertise with AWS’s most advanced AI tooling to scale security testing. • Discover new techniques and attack paths that no checklist or scanner would suggest. • Leave behind detections and tools that protect AWS long after you’ve moved on.

• Bring experience applying threat modelling or other risk identification techniques. • Perform offensive testing of web applications and services, plus source code review, to find non-trivial issues. • Script your way out of problems and deploy code in an enterprise environment. • Bring experience with AWS services such as S3, Lambda, EC2, KMS and IAM. • Hold a bachelor’s degree in Computer Science, Cybersecurity or a related field, or equivalent experience. • Show experience in professional penetration testing, code auditing, bug hunting or CTFs. • Bring depth in at least two complex security domains, such as IAM, web and API security, networking or tenant isolation. • Find security issues in languages such as Java, Python, JavaScript, Rust, Ruby or C. • Write code in Python or similar, including boto3, and back conclusions with evidence.

• Bring experience turning a single finding into a campaign or detection across many systems. • Show experience using AI tools or LLMs to scale security research and judging where they fall short. • Bring experience working with threat intelligence or detection teams. • Show experience performing or supporting Red Team engagements. • Bring experience running an initiative such as a CTF or an apprenticeship.

• Turn threat intelligence, scanner output and past findings into testable hypotheses. • Test live AWS services through penetration testing and AI-augmented source code review. • Invent new techniques and explore research areas nobody has looked at yet. • Prove or rule out impact across systems with safe, reproducible proofs of concept. • Trace attack paths across chained components to reveal compound risk. • Drive findings to resolution with service teams, SecOps and AppSec, and check fixes can’t be bypassed. • Build detections, canaries, fuzzers and harnesses that steer the team’s AI tools. • Test agentic AI systems, and mentor engineers and apprentices.

• Work remotely from anywhere in the UK. • Enjoy flexible work hours and arrangements that support work-life harmony. • Access extensive training, knowledge-sharing and career growth resources. • Build experience across cloud, devices, retail, healthcare and more. • Join an inclusive team culture with ongoing learning experiences. • Request workplace accommodations during hiring and onboarding if you need them.

Amazon Web Services (AWS) is the world’s leading cloud provider, running sensitive workloads for businesses from start-ups to large enterprises. Amazon Security sets a high bar for security across all of Amazon’s products and services. Its Continuous Security Testing team combines human expertise with AI-assisted testing so security coverage keeps pace with AWS’s growth.