Senior Security Engineer, Vulnerability Management and Remediation Operations

3 weeks ago

Riyadh, Ar Riyāḑ, Saudi Arabia Amazon Full time
Senior Security Engineer, Vulnerability Management and Remediation Operations

Job ID: 2888327 | Amazon Support Services Pty Ltd

Amazon Security is seeking an experienced and innovative Senior Security Engineer to join our Vulnerability Management and Remediation Operations (VMRO) team in Sydney, Australia. The VMRO team is responsible for discovering, assessing, triaging, detecting, and driving the remediation of vulnerabilities across the Amazon ecosystem.

As a Senior Security Engineer on the VMRO team, you will:

  1. Deeply understand and assess the technical details and potential impact of vulnerabilities across Amazon's infrastructure, services, and applications.
  2. Lead the detection and analysis of vulnerabilities through the development and optimization of vulnerability scanning, correlation, and prioritization capabilities.
  3. Thoroughly investigate and triage vulnerabilities, identifying severity and the scope of potential impact to Amazon.
  4. Design and implement automation, tools and workflows to enhance our operations capabilities.
  5. Partner with software engineering and operations teams to identify and increase coverage and detection capability gaps across Amazon.
  6. Mentor and train junior security engineers, sharing your expertise in vulnerability management best practices.
  7. Collaborate with information security leadership to set the strategic direction for the VMRO program and report on key performance metrics.
  8. Be part of a global team and participate in periodic on-call responsibilities to ensure the continuous monitoring and remediation of vulnerabilities.
If you're excited about the opportunity to make a significant impact on the security of one of the world's largest and most complex technology ecosystems from our Sydney office, we'd love to hear from you

About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

Why Amazon Security
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture.

Inclusive Team Culture
In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Mentorship and Career growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.BASIC QUALIFICATIONS

- BS degree in Computer Science, Computer Engineering, Software Engineering, Cybersecurity or related technical degree; or 4+ years equivalent technology experience.
- 7 years engineering experience in system, network, and/or application security or the development of security products.
- 5 years experience improving accuracy of vulnerability detection mechanisms across a diverse technical ecosystem.
- 5 years experience and deep knowledge of vulnerabilities, exploits and vulnerability management systems.
- 5 years experience developing vulnerability assessment tests, tools and exploits in Python, Java, etc.
- 3 years experience building applications or systems on cloud-based services.

PREFERRED QUALIFICATIONS

- Understanding of networking, operating system internals, and system design.
- Experience across the vulnerability management and remediation lifecycle from assessment through remediation.
- Experience with developing exploits, host-based and container-based detections.
- Experience with AWS services.

#J-18808-Ljbffr

  • Security Operations Director

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia UTEC Full time

    We're looking for a dedicated professional to lead our security operations team. As Security Operations Director, you will oversee the day-to-day security operations, ensuring the implementation of effective security controls and monitoring systems.This critical role requires strong leadership skills, technical expertise, and a deep understanding of...

  • Vulnerability Assessment Specialist

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia CodeNinja Inc. Full time

    Job DescriptionWe are seeking a skilled cybersecurity professional to perform vulnerability assessments and penetration testing on various systems and applications. The ideal candidate will have hands-on experience with penetration testing tools and a strong understanding of security frameworks.ResponsibilitiesConduct VAPT on web applications, APIs, and...

  • Cyber Security Defense Head

    4 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Lean Full time

    We are seeking an experienced Cyber Security Defense Head to lead and oversee our cybersecurity operations. The ideal candidate will be responsible for managing the Security Operations Center (SOC), Penetration Testing, Vulnerability Management, and Identity & Access Management (IAM) functions. This role requires a strong background in establishing and...

  • Security Operations Center

    4 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Cloud Consultancy Digitalization & Security Full time

    Security Operations Center (SOC) Team LeadCCDS is at the forefront of providing innovative cybersecurity solutions and is seeking a skilled and experienced Saudi Security Operations Center (SOC) Team Lead to join our dynamic team. As the SOC Team Lead, you will oversee the daily operations of the Security Operations Center, ensuring that our cybersecurity...

  • Remediation Activity Lead

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Securera Full time

    We are seeking a highly skilled Remediation Activity Lead to join our team at Securera. This role is critical to the successful delivery of our Cyber Security Service and will act as the onsite focal point for customer Cyber Security Service.The Remediation Activity Lead will be responsible for accepting incidents assigned to their business unit on the MSS...

  • BMC Remedy Helix Engineer

    4 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Tie (رابطة الحلول الابداعية) Full time

    We are seeking a skilled BMC Remedy Helix Operations Engineer to join our team on-site in Saudi Arabia - Riyadh. The ideal candidate will have 3 to 6 years of experience in managing and operating BMC Remedy Helix solutions. This role involves monitoring, maintaining, and optimizing the IT Service Management (ITSM) platform to ensure smooth operations and...

  • Remedy Helix Operations and Maintenance Specialist

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Tie (رابطة الحلول الابداعية) Full time

    Tie (رابطة الحلول الابداعية) is looking for a highly skilled BMC Remedy Helix Operations Engineer to join our team in Riyadh, Saudi Arabia. The successful candidate will have 3 to 6 years of experience in managing and operating BMC Remedy Helix solutions.Responsibilities:Oversee daily operations, monitoring, and maintenance of BMC Remedy...

  • Cyber Security Engineer

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Primegate Full time

    Our Company is looking for a Cybersecurity Presales Engineer/consultant with the following qualifications:QualificationsBachelor's degree in a related field, such as Computer Science, Information Technology, or Cybersecurity.Technical Skills and KnowledgeSecurity Protocols: Knowledge of encryption methods, authentication protocols, and access control models...

  • Security Officer

    4 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Total-TECH Co. Full time

    The Job DescriptionGood knowledge of SIEM, SOAR, FW, Sandboxing, VPNs, and enterprise-level cyber security products.Ability to analyze, triage, and remediate security incidents and strong understanding of security incident management, malware management processes.Constantly monitor data flow and network flow (internally and externally), analyze the traffic,...

  • MNC Hiring for Cloud Security Posture Management Prisma for VM for Saudi Location #hiring #CSPM #VM

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia ALPHACOM SYSTEMS AND SOLUTIONS PRIVATE LIMITED Full time

    MNC Hiring for Cloud Security Posture Management Prisma for VM for Saudi LocationRole DescriptionThis is a full-time role for a MNC Hiring for Cloud Security Posture Management Prisma VM. The role is for Saudi Riyadh location.JD:CSPM PRISMA Vulnerability Management:Vulnerability Management (Scanning, Analysis, report, remediation)CSPM (Cloud security posture...

  • Cloud Security Architect

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Avature Full time

    Offensive Security ExpertWe're seeking an Offensive Security Expert to join our team. As a seasoned professional, you'll play a critical role in helping our clients strengthen their cybersecurity defenses through comprehensive vulnerability assessments and ethical hacking techniques.Your responsibilities will include:Conducting Penetration Tests: Perform...

  • Senior Penetration Specialist

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Avature Full time

    Senior Penetration SpecialistWe're seeking a Senior Penetration Specialist to join our team. As a seasoned professional, you'll play a critical role in helping our clients strengthen their cybersecurity defenses through comprehensive vulnerability assessments and ethical hacking techniques.Your responsibilities will include:Conducting Penetration Tests:...

  • security test engineer

    4 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia CARE Full time

    About the job SECURITY TEST ENGINEERJob Summary: As a Security Testing Engineer, you will be responsible for ensuring the security of systems and applications by conducting regular testing to identify and fix vulnerabilities. Your role involves developing and maintaining security testing procedures, creating detailed reports on findings, and collaborating...

  • security test engineer

    5 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Duncan & Ross Full time

    Job Summary: As a Security Testing Engineer you will be responsible for ensuring the security of systems and applications by conducting regular testing to identify and fix vulnerabilities. Your role involves developing and maintaining security testing procedures creating detailed reports on findings and collaborating with development teams to incorporate...

  • Senior Specialist, Product Security

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Ceer Full time

    Job PurposeThe Product Security Senior Specialist is accountable for supporting CEER vehicle programs in compliance with relevant automotive cybersecurity regulations and standards, including technical alignment with internal and external stakeholders.Job RoleKey Functional ResponsibilitiesAutomotive Cybersecurity Architecture: Design and implement robust...

  • Cyber Security Expert

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia proven Full time

    Company OverviewWe are a proven leader in the field of cybersecurity, committed to protecting our clients' sensitive information.Job DescriptionThe Senior Cyber Security Specialist will be responsible for overseeing day-to-day cybersecurity activities, including monitoring, incident response, and regular security tasks. This individual will provide technical...

  • Security Engineer Lead

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia weai labs Full time

    Leading the future in luxury electric and mobilityAt Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility.We plan to lead in this new era...

  • Information Security Specialist

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Applicable Limited Full time

    We are looking for a highly skilled Cybersecurity Engineer to join our team at Applicable Limited. As a key member of our IT department, you will be responsible for protecting our systems and data from cyber threats. Your duties will include designing and implementing secure network solutions, conducting risk assessments, and developing security policies and...

  • Security Manager

    4 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia DataVolt Full time

    Get AI-powered advice on this job and more exclusive features.Company DescriptionDataVolt is a global leader in sustainable and innovative data center solutions. We provide businesses across the world with the infrastructure they need to connect, collaborate, and grow in the data-driven landscape of today. Our solutions focus on security, reliability,...

  • Security Manager

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia DataVolt Information Technology Company Full time

    Company DescriptionDataVolt is a global leader in sustainable and innovative data center solutions. We provide businesses across the world with the infrastructure they need to connect, collaborate, and grow in the data-driven landscape of today. Our solutions focus on security, reliability, scalability, and sustainability, empowering our clients to truly...