Penetration Testing Engineer (UK-based)

We are looking for a Penetration Testing Engineer who has a strong passion for security at scale. You will be part of a team responsible for delivering continuous assessments. Your tasks will include solving complex technology problems, building tools to automate manual efforts, and influencing how Amazon services respond to and mitigate threats.

Amazon security covers a wide range of platforms and technologies, including cloud services, Internet of Things (IoT), identity and access management, mobile devices, virtualization, and custom hardware, all operating at a massive scale.

As a Security Engineer, you will ensure our services, applications, and websites are designed and implemented with the highest security standards. Responsibilities include web application, network, and operational penetration testing, automating repetitive tasks, and creating threat mitigation plans. You will work directly with internal teams to solve challenging software problems.

You should be able to produce results amidst ambiguity and limited knowledge, foster constructive dialogue, and drive resolution even when disagreements arise. You are considered a technical leader, working efficiently and delivering results with limited guidance. Your focus will be on ambiguous problems related to hardware and software initiatives, with a long-term view of team processes and software, understanding their business impact. You will proactively address architectural deficiencies and propose larger projects, breaking work into parallel tasks for yourself and others.

Amazon's Leadership Principles such as "Dive Deep", "Earn Trust", "Deliver Results", and "Invent and Simplify" are integral to daily work. A successful candidate will possess troubleshooting, technical, and communication skills, and be capable of making complex decisions.

• Contribute to the design, implementation, and execution of security review and testing methodologies for critical production services, ensuring risks are remediated in collaboration with service teams.
• Perform design reviews, threat modeling, security reviews, penetration testing, and red teaming on production systems.
• Scope and conduct penetration testing and vulnerability research on complex proprietary software and hardware.
• Collaborate with Amazon Security teams to develop large-scale testing, monitoring, remediation, and analytics solutions.
• Work with internal development teams to create comprehensive security tooling and improvements at scale.
• Demonstrate exceptional judgment, integrity, business acumen, and communication skills.
• Prepare and present detailed technical information for internal and external audiences.

Our team values work-life balance, offering flexible schedules to promote productivity and well-being. We support new members with a diverse environment that encourages knowledge sharing and mentorship. We focus on career growth, assigning projects that help engineers develop and handle more complex tasks over time.

At Amazon, we embrace diversity and foster an inclusive culture through employee-led affinity groups, innovative benefits, and learning experiences such as Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity). Our culture is reinforced by our 16 Leadership Principles, encouraging diverse perspectives, curiosity, and trust.