3 days ago
Base Salary
$178k - $227k/yr
Responsibilities
- Author threat models for platform architectures and identify attack surfaces across compute nodes, network transit, and control planes.
- Design and implement node-integrity attestation flows using TPM and TEE technologies, including fallback assurance levels.
- Specify and validate encrypted workload delivery to protect model weights and inference inputs and outputs at rest and in transit.
- Build result-integrity verification mechanisms and review runtime sandboxing, scheduler trust assumptions, API surfaces, and network encryption.
- Conduct security reviews, lead penetration-test preparation, and author compliance documentation.
Requirements
- Know at least two of Scala, Java, Python, C/C++, or Go.
- Have non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks with command-line tools.
- Have non-internship experience identifying industry security vulnerabilities, analyzing attack patterns, and applying remediation techniques.
- Have experience mentoring, serving as a tech lead, or leading an engineering team.
- Have experience with threat modeling and penetration testing, or equivalent analytical and communication experience combined with Linux and networking-protocol experience.
- Have deep expertise in hardware attestation, including TPM, TEE, secure enclaves, and cryptographic protocols.
- Have 7+ years of security engineering experience, including at least 3 years focused on systems or infrastructure security.
- Have strong understanding of zero-trust architectures and practical implementation.
- Have experience with secure API design, authentication, and authorization frameworks.
- Preferred qualifications include threat modeling or risk-identification experience, cloud computing and deployment architecture knowledge, compliance assessments involving standards such as ISO, NIST, SOX, PCI, HIPAA, or GDPR, distributed or edge-platform security, secure enclave programming, ML model protection, and published research or patents in applied cryptography, remote attestation, or secure computation.
Benefits
- Comprehensive health coverage including medical, dental, vision, prescription, life and AD&D insurance, an employee assistance program, mental health support, a medical advice line, and flexible spending accounts.
- 401(k) matching, paid time off, parental leave, and adoption and surrogacy reimbursement coverage.
- Position is based in Seattle, Washington, USA.
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.