Amazon Vulnerability Management and Remediation (VMR) is looking for a Security Engineer to join our Vulnerability Management Response Team. VMR is responsible for the discovery, assessment, triage, and remediation of vulnerabilities across Amazon. We are data-driven, set big goals, and are always challenging ourselves and each other to identify better solutions and take on new challenges. Our team offers the unique opportunity to work with leading industry security experts and engage across Amazon teams and leadership.As a Security Engineer in VMR Response, you will play a hands-on role in the proactive identification and remediation of security issues at Amazon. You will be part of a global-scale vulnerability response service supporting a diverse technical ecosystem. Your teammates are an international group of security engineers, software developers, and technical program managers dedicated to continuously raising the security bar.Key job responsibilities- You intake, and evaluate critical and emergent security vulnerabilities, misconfigurations, and weaknesses, with little to no input from others.- You craft and deploy security campaigns, with little to no input from others.- You participate in on-call rotations.- You are a significant and autonomous contributor.- You solve difficult and ambiguous security problems. You help prevent attacks that could potentially compromise large systems, company trust, or customer data.- Your work focuses on projects with cross-functional impact (e.g., implementing workflow automation, working on surface expansion, developing new assessment methodologies). Your work is consistently of a high quality.- You are proficient in a range of security design approaches and know when it is appropriate to use them (and when it is not).- You specialize in two or more CBK areas, (e.g. access control systems and methodology, network security, applications and systems development security, security architecture and models, cryptography, or operations security).- Advising peers, managers, and senior leaders, you help influence and drive partner-team compliance (e.g., data classification, regulatory obligations, and other security goals).- You may work on large security events like embargoed issues and are developing Incident Commander skills.About the teamInclusive Team Culture.Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon's culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.Work/Life Balance.Our team puts a high value on work-life balance. It isn't about how many hours you spend at home or at work; it's about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives.Mentorship & Career Growth.Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we're building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.We are open to hiring candidates to work out of one of the following locations:Seattle, WA, USA<