Senior Security Engineer, AWS Security Verification & Validation Team

• Join AWS Point-in-Time Security Testing as a Senior Security Engineer, working remotely from the UK. • Act as a technical leader, owning complex security testing engagements end to end. • Take on AWS launches and architectures where automation alone isn’t enough. • Think like an adversary and demonstrate realistic impact on high-consequence risks. • Build harnesses that steer agentic AI so experts can focus on the hardest problems. • Test AWS’s own agentic systems as they become new targets.

• Hold a bachelor’s degree or above in Computer Science, Computer Engineering, Cybersecurity or a related field. • Bring 5+ years in professional penetration testing, source code auditing, bug hunting or competitive CTFs. • Find non-trivial vulnerabilities through offensive testing and source code review. • Show mastery of two or more complex security domains, such as networking, tenant isolation, IAM or cryptography. • Bring experience building and steering AI agents for security work, and understand how they can be attacked. • Write code in languages such as Java or Python. • Know security design review, threat modelling, risk analysis and concepts such as authentication and cryptography. • Help organisations make security decisions and explain impacts to business teams. • Bring experience with enterprise software.

• Bring experience building agentic AI harnesses and working with agent-to-agent (A2A) protocols. • Show experience assessing LLM or agentic applications for prompt injection and tool abuse. • Bring experience performing or supporting Red Team engagements. • Show experience with serverless architectures, virtualisation and container escapes. • Bring experience with microservices, full-stack Linux architectures, CI/CD or distributed systems. • Show experience designing technical security controls at business-division level.

• Own a portfolio of security testing engagements and set testing strategy across services. • Perform penetration testing and AI-augmented code review of complex AWS software. • Take each risk hypothesis to a documented conclusion, proving or ruling out the attack path. • Bring clarity to engagements where no security strategy exists yet. • Trace attack paths across chained components and organisational boundaries. • Write clear engagement results for engineering and non-engineering audiences. • Lead escalations with Senior Managers and Principal Engineers when fixes stall. • Build frameworks, runbooks, fuzzers and detection rules the whole team can reuse. • Set the peer-review bar, lead multi-engineer engagements and mentor engineers.

• Work remotely from anywhere in the UK. • Enjoy a flexible working culture that supports work-life harmony. • Access extensive mentorship, training and career growth resources. • Take part in promotion assessments as a sought-after technical leader. • Join an inclusive team culture with ongoing learning experiences. • Request workplace accommodations during hiring and onboarding if you need them.

Amazon Web Services (AWS) is the world’s leading cloud provider, running sensitive workloads for businesses, enterprises and governments worldwide. Amazon Security sets a high bar for security across all of Amazon’s products and services. Its Point-in-Time Security Testing team applies expert human judgement to AWS’s most complex and high-impact launches.