Software Development Engineer , Abuse Prevention, Devices and Services Security
We are open to hiring candidates to work out of one of the following locations: Austin, TX, USA.
About the role
Amazon Lab126 is an inventive research and development company that designs and engineers high-profile consumer electronics. Lab126 began in 2004 as a subsidiary of Amazon.com, Inc., originally creating the best-selling Kindle family of products. Since then, we have produced devices like Fire Tablet, Fire TV, Amazon Echo and Alexa.
As a Software Development Engineer, you will play a critical role in safeguarding millions of Amazon customers and their favorite devices, including Echo, Fire TV, Tablets, and more. This position offers a unique opportunity to secure the next generation of consumer technology by identifying and solving issues in hardware and low-level software. You will work on products used by millions of customers worldwide while collaborating with talented engineers in a fast-paced, innovative environment.
Responsibilities
- Specify and develop security detection mechanisms in our low-level device software (e.g., Trusted Execution Environment, Trusted Applications)
- Architect, design, implement, and evaluate security-focused tools and services for device integrity
- Analyze the security posture of hardware (SoC, MCU) and low-level OS components of consumer devices
- Identify vulnerabilities, develop mitigations, and validate solutions across the device stack
- Provide Tier 2 and Tier 3 security operations support, including incident handling and response
- Contribute to projects that develop new intellectual property
- Collaborate cross-functionally with hardware, firmware, and platform teams
- Leverage AI to automate workflows and accelerate delivery
- Thrive in a fast-paced Agile environment
We are a builder team dedicated to developing tools and mechanisms to detect device abuse in the field and apply mitigations when detected. We work with multiple device product teams and security teams to strengthen device security.
Requirements
- Bachelor's degree in Computer Science, Engineering, Mathematics, or a related field, or 5+ years of embedded firmware development experience
- Experience in embedded development in C/C++
- 1+ years of Android development experience
- 1+ years of experience in hardware or platform security (secure boot, TEE, cryptographic implementations)
- Experience with reverse engineering tools and techniques (e.g., IDA Pro, Ghidra, JTAG debugging)
Preferred Qualifications
- Master's degree or above in computer science or equivalent
- Experience developing within Trusted Execution Environments (e.g., ARM TrustZone, OP-TEE, Trusty, QSEE)
- Knowledge of secure communication between TEE and REE, inter-processor communication, or secure channel protocols
- Experience with embedded operating systems (Linux kernel, RTOS) and hardware design
- Knowledge of hardware security mechanisms: secure boot, hardware root of trust, attestation
- Experience with threat modeling and security architecture review of embedded systems
- Experience with offensive security techniques: penetration testing, exploit development, and vulnerability research
- Knowledge of cryptographic protocols and their implementation in constrained environments
- Experience with scripting languages (Python, Bash) for automation and tooling
- Knowledge of side-channel attacks and fault injection techniques
- 2+ years delivering commercial embedded software or security-focused services
Benefits
Amazon offers comprehensive benefits including:
- Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, and option for Supplemental life plans)
- Employee Assistance Program (EAP) and Mental Health Support
- Medical Advice Line
- Flexible Spending Accounts
- Adoption and Surrogacy Reimbursement coverage
- 401(k) matching
- Paid time off and parental leave
Learn more about our benefits at amazon.jobs/en/benefits.
Pay
USA, TX, Austin - $143,700.00 - $194,400.00 USD annually. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location.
About the team
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.