Amazon Senior Security Engineer AWS Vulnerability Management 

United States, Texas, Arlington 

27475560

As a Sr. Security Engineer in AWS Vulnerability Management, you will work on a team of security engineers, software developers, and technical program managers. You will interpret and triage vulnerability disclosures, collaborate with subject matter experts across AWS on technical solutions, and drive remediation activities across AWS’s unprecedented scale.Key job responsibilities- Become a subject matter expert in Host OS domain in AWS Vulnerability Management focusing on Linux based operating systems
- Own and coordinate large-scale remediation or triage campaigns, including reporting to AWS Security leadership.- Research and interpret OS-level vulnerability disclosures, focusing on Kernel, system packages, and OS component vulnerabilities
- Author risk assessment statements, remediation guidance, and status reports- Design and develop tooling to automate and refine vulnerability management processes
- Periodic on-call responsibilitiesAbout the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance

- BS degree in Computer Science, Computer Engineering, Information Systems or related degree; or 6+ years equivalent technology experience.
- 4+ years experience in Linux system and security, including patch management and OS hardening.
- 4+ years experience in threat modeling and interpreting OS-level vulnerability disclosures.
- 4+ years experience building automated tools in C, C++, Java, Python, Perl, PowerShell, or Ruby.