Senior Security Engineer, Operational Research

Salary: £60,000 - 110,000 per year

Requirements:

• Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
• Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• Experience working in identifying security issues and risks, and developing mitigation plans
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience as a mentor, tech lead or leading an engineering team
• Experience generating automated metrics to measure service and program effectiveness and consistency
• Experience in security operations, risk management, and incident response
• Experience designing or building automated security response workflows, playbooks, or orchestration systems (SOAR, custom pipelines, or equivalent)

Responsibilities:

• Own the response playbooks and investigation methodology that power our automation platforms
• Design and implement autonomous incident response workflows from initial triage through root cause analysis to remediation
• Build automated DFIR capabilities including log correlation, forensic evidence collection, and threat eradication at cloud scale
• Drive the security domain decisions on how to investigate, when to act, and what to fix while partnering with SDEs on platform scalability
• Participate in an on-call rotation focused on maintaining automation health and security escalations
• Mentor engineers across the team on security domain expertise and incident response best practices

Technologies:

• AWS
• Cloud
• Security
• Support

More:

We are building systems that investigate and remediate security incidents at machine speed, reducing human intervention from triage to eradication to the strict minimum. We are part of Amazon Securitys Operational Research and Development team, combining deep security expertise with software engineering to transform how AWS responds to security events. Our mission is to build intelligence that replaces manual investigation with automated log dives, DFIR pipelines, fix identification, and autonomous mitigation. We are a mixed team of Security Engineers and Software Development Engineers with meaningful end-to-end ownership of production systems, from design through deployment and operational excellence. We prototype rapidly, ship iteratively, and value directness, intellectual honesty, and a bias toward building over discussing. We offer a flexible, distributed working culture with core collaboration hours that respect personal time, and we are intentional about building an inclusive environment where diverse backgrounds and perspectives drive better security outcomes.

last updated 36 week of 2026