Security Engineer I, Vulnerability Management and Remediation Operations

About the role

Join Amazon's Vulnerability Management & Remediation Operations (VMRO) team in Sydney and help protect the Amazon ecosystem. You will analyze vulnerability disclosures, assess their impact, and work with builder teams to remediate security issues quickly.

Key responsibilities

• Analyze public and private vulnerability disclosures and exploit code to understand technical details and potential impact.
• Investigate, triage, and assign severity to vulnerabilities across Amazon's infrastructure, services, and applications.
• Support response and remediation efforts, guiding builder teams to fix security issues in a timely manner.
• Engineer high‑quality, scalable detection mechanisms and design automation, tools, and workflows to improve operational efficiency.
• Participate in on‑call rotations to ensure continuous monitoring and remediation of vulnerabilities.

Required profile

• 2+ years of experience with web protocols, common security attacks, and remediation (non‑internship).
• Bachelor’s degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities, penetration testing, and exploit development.

Required skills

• Vulnerability analysis and exploit assessment
• Penetration testing techniques
• Automation and scripting for security workflows
• Experience with AWS services or other cloud platforms