Senior Security Engineer, AWS Security

F3 Learning; London; On-site; GBP 80,000 - GBP 100,000; Full time

Job summary

A leading cloud service provider in London is seeking a Senior Security Engineer to build and manage services that detect cybersecurity threats. The ideal candidate will have extensive experience in security investigations and penetration testing, and demonstrate technical leadership. This role involves collaboration with various teams to improve security solutions and mentoring junior engineers.

Qualifications

• Extensive experience performing security investigations, penetration testing, and/or incident response in large organizations.
• Deep understanding of security threats and hands-on experience with cyber attack defense.
• Ability to develop code in at least one modern language and perform security code reviews.

Responsibilities

• Build and manage services that detect and mitigate cybersecurity threats.
• Collaborate with teams to develop innovative security solutions.
• Engage with customers to improve security programs and processes.
• Mentor junior engineers through code reviews and guidance.

Skills

Security investigations

Penetration testing

Incident response

Cybersecurity threats awareness

Programming in Java, Go, TypeScript, Python, or Rust

Technical leadership

Education

BS or MS in a STEM-related field

Tools

Big data analytics technologies

MITRE ATT&CK framework

Kafka

Spark Streaming

Kinesis

Job description

Overview

Job ID: 3088343 | AWS EMEA SARL (UK Branch)

Amazon Web Services (AWS) is the leading cloud provider, providing virtualization, storage, networking, messaging, and many other services to customers worldwide. AWS runs a globally distributed environment at massive scale. Businesses, from startups to enterprises, run their operations and applications on AWS’ multi-tenant infrastructure.

As a Senior Security Engineer, you’ll help to build and manage services that detect and automate the mitigation of cybersecurity threats across Amazon’s infrastructure. You’ll work with data scientists, software development engineers, and other security engineers across multiple teams to develop innovative security solutions that protect the AWS cloud for all customers and preserve our customers’ trust in us. You’ll use the full breadth of AWS technologies to build services that proactively protect AWS customers, both internally and externally, from security threats.

You will be working in a team of industry-leading security experts operating with UK customers to improve industry-leading security programs and processes. This team manages the underlying security programs for personnel security, physical and logical accreditations, education, awareness and training, assurance, and cyber security. This position will have visibility at senior levels of government agencies, commercial institutions, and AWS, including interaction with CISOs, CTOs, their staffs, and AWS senior leadership.

In addition to a strong understanding of security technologies, tool development, offensive and defensive security tactics, and ideally experience with distributed systems, the team values knowledge sharing and mentorship. Senior engineers, data scientists, and managers mentor junior engineers and others through one-on-one mentoring and constructive code reviews.

Responsibilities

• Build and manage services that detect and automate the mitigation of cybersecurity threats across AWS infrastructure.
• Collaborate with data scientists, software engineers, and security engineers across multiple teams to develop innovative security solutions.
• Protect the AWS cloud for all customers and preserve customer trust by leveraging the full range of AWS technologies.
• Engage with UK customers to operate and continuously improve industry-leading security programs and processes.
• Contribute to security programs and processes for personnel security, accreditations, education, awareness, assurance, and cyber security.
• Mentor junior engineers and engineers from varied backgrounds through code reviews and one-on-one guidance.

Basic Qualifications

• Extensive experience performing security investigations, penetration testing, and/or incident response in large organizations.
• Deep understanding of security threats, hands-on experience detecting and defending against cyber attacks, and experience using big data analytics and orchestration to address security challenges. Ability to develop code in at least one modern language such as Java, Go, TypeScript, Python, or Rust, and perform security code reviews.
• Demonstrated technical leadership in security (e.g., tech lead, security architecture for a product or system, leading a security project) and experience coaching junior security engineers.

Preferred Qualifications

• BS or MS in a STEM-related field. Understanding of the MITRE ATT&CK framework and knowledge of host and network telemetry data (e.g., process lists, application logs, NetFlow).
• Awareness of current cybersecurity threats, actors, and techniques. Experience with data science, big data analytics technology stack, analytic development for endpoint and network security, and streaming technologies (e.g., Kafka, Spark Streaming, Kinesis).
• Strong ownership mindset with a collaborative approach to overcoming challenges and influencing organizational change.

Amazon is an equal opportunities employer. We believe that employing a diverse workforce is central to our success. We make recruiting decisions based on experience and skills. We value passion to discover, invent, simplify, and build. Protecting privacy and the security of data is a longstanding priority.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation during the application and hiring process, please review our accommodations information.