Security Engineer II, Specialized Businesses Security, External Vulnerability Operations
Added 19 Aug · still live
Likely
Sponsorship likelihood
This employer has issued visas recently
Not disclosed
Salary
Not disclosed by employer
£48,500
Going rate
Skilled Worker going rate
This role likely qualifies for a Skilled Worker visa
SOC 2135 (95% match) is an eligible occupation, with a going rate of £48,500, and Amazon is a licensed sponsor. That is our reading of the rules. Whether they issue a Certificate of Sponsorship is still their call.
In 2025, Amazon assigned 31 or more Certificates of Sponsorship for SOC 2135 jobs, according to the Home Office.
Your salary route
New graduate or PhD holder? Pick one of the lower rates.
What each route needs for this job
| Occupation code | New entrant 70% of going rate | STEM PhD 80% of going rate | Relevant PhD 90% of going rate | Standard rate 100% of going rate |
|---|---|---|---|---|
2135 Cyber security professionals Most likely code | £34,000 | £38,800 | £43,700 | £48,500 |
We use the lowest threshold across the plausible codes. Likelihood is Possible at most when the pay clears only a lower rate, or only under a less likely code. How the Home Office picks the code
About the role
Description
This individual will be working with external security researchers and Amazon teams to secure Amazon’s public-facing devices and services. In this role, you will be responsible for ensuring vulnerabilities are remediated with urgency by partnering with service teams, ensuring what is learned through disclosure and mitigation improves the security of Amazon’s device and software development life cycle. This role will provide you with challenging leadership and technical opportunities and the chance to grow Amazon’s Bug Bounty and Threat Intelligence programs into the best on planet Earth.
You will be in direct contact with teams in a variety of business verticals, giving you firsthand knowledge about how Amazon is built and how it operates at a deep, technical level. Additionally, you will leverage the knowledge you gain about Amazon to find new ways to drive improvements to Customer relationships, services, processes, and technologies throughout the company, with the goal of ensuring the continued safety and security of our customers.
You will use your technical skills to triage disclosed risks and collaborate with customers and security researchers to maintain and raise Amazon’s high security bar. You’ll be backed up by a team of highly skilled security engineers all working with a singular focus of maintaining customer trust and security. You must demonstrate resilience and navigate ambiguous situations with composure and tact. Above all else, a strong sense of Customer Obsession is necessary to focus on the goal of keeping Amazon and its customers secure with the highest priority.
Key job responsibilities
This individual will be working with external security researchers and Amazon teams to secure Amazon’s public-facing devices and services. In this role, you will be responsible for ensuring vulnerabilities are remediated with urgency by partnering with service teams, ensuring what is learned through disclosure and mitigation improves the security of Amazon’s device and software development life cycle. This role will provide you with challenging leadership and technical opportunities and the chance to grow Amazon’s Bug Bounty and Threat Intelligence programs into the best on planet Earth.
You will be in direct contact with teams in a variety of business verticals, giving you firsthand knowledge about how Amazon is built and how it operates at a deep, technical level. Additionally, you will leverage the knowledge you gain about Amazon to find new ways to drive improvements to Customer relationships, services, processes, and technologies throughout the company, with the goal of ensuring the continued safety and security of our customers.
You will use your technical skills to triage disclosed risks and collaborate with customers and security researchers to maintain and raise Amazon’s high security bar. You’ll be backed up by a team of highly skilled security engineers all working with a singular focus of maintaining customer trust and security. You must demonstrate resilience and navigate ambiguous situations with composure and tact. Above all else, a strong sense of Customer Obsession is necessary to focus on the goal of keeping Amazon and its customers secure with the highest priority.
Key job responsibilities
- Triage externally disclosed hardware and service security issues, suggest fixes, and collaborate with builder teams for remediation
- Identify risk trends in Amazon devices and services, and collaborate with builder teams for remediation
- Automate manual processes to streamline security work
Advertisement
- Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
- Experience with AWS products and services
- Experience working with device technologies under development, familiarity with flashing firmware, basic device debugging and familiarity with reading/pulling device logs, or experience scripting in one or more language (e.g. Bash, Python, Perl, Ruby)
- Deep understanding of hardware security, firmware analysis, operating system internals, and low-level programming
- Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics)
- 5+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Experience supporting Red Team, Penetration Testing, or Bug Bounty programs
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
Company
- Amazon Development Centre (London) Limited
Job ID: A10494640
Job ID: A10494640
This description is the source posting as it read when we added it. We are not affiliated with Amazon, so check their own site for the current details.
Where this offer sits in the market
Cyber security professionals (SOC 2135) · UK · ONS ASHE 2025 · basic pay · ~30k in sampleSOC 2135
- Middle half £43,680–69,316
- Median £51,376
- Going rate £48,500
- Threshold £41,700
- New entrant £34,000–43,700
Similar sponsored roles
See all UK visa jobsNo close matches live right now.
Browse more sponsored jobs at AmazonAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. Amazon holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. In 2025, Amazon assigned 31 or more Certificates of Sponsorship for SOC 2135 jobs, according to the Home Office. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.