Security Engineer, Amazon Leo Security

About the role

Amazon Leo (formerly Project Kuiper) is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world. The Amazon Leo Security team owns the security of product and operations of Amazon Leo end-to-end, providing the necessary infrastructure and mechanisms to ensure the security of the satellite constellation and protect the integrity and confidentiality of customer data.

Responsibilities

You will be responsible for establishing product-specific security bar, threat models, and security priorities, and will identify design and implementation defects. You will support product development processes by providing consultation services on difficult security decisions and collaborate with business leaders to define security priorities.

• Support product leaders by acting as a trusted advisor and providing direction that makes security easy
• Help leaders measure their org's security execution and guide teams towards outcomes that produce products that safely handle customer data
• Collaborate with builder teams to assess technical debt and risk, and provide strategic direction that addresses vulnerabilities and fortifies products
• Lead the burn down of long-term risk and guide teams towards solutions that are secure by default
• Leverage support from automation teams that find discoverable vulnerabilities and advocate for the creation and deployment of new testing tools and detection mechanisms
• Enable builder teams to become proactive and self-sufficient on security, and instill a security culture in builder teams
• Mentor builders who aspire to become security advocates and security engineers via 1-1 sessions and office hours
• Assist Red Teams in identifying security testing priorities and assist in scoping penetration tests and help deep-dive on these engagements
• Investigate emerging security issues, root cause them, and devise mechanisms to prevent them
• Propose a security vision for the business that delivers security that protects customers

Qualifications

The following qualifications are required:

• 3+ years of programming experience in a language such as Python, Ruby, Go, Swift, Java, .Net, or C++
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

The following qualifications are preferred:

• 2+ years of experience in threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC)

Benefits

Amazon offers comprehensive benefits, including:

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off and parental leave

The base salary range for this position is $159,300.00 - $202,400.00 USD annually, and the Amazon package will include sign-on payments and restricted stock units (RSUs).