Sr Security Engineer, Network, Leo Security

About the role

The Senior Security Engineer will defend the manufacturing lines, launch sites, and global ground infrastructure behind the Amazon Leo constellation from the most sophisticated threat actors on the planet. You will own network security across diverse environments, including corporate IT, manufacturing OT/SCADA, lab, launch operations, and ground stations.

Responsibilities

• Analyze and deploy detections to production networks, leveraging automation and tooling to identify vulnerabilities and surface security events.
• Conduct threat modeling for network deployments across environments and locations, including OT/ICS topologies.
• Build and maintain a network security assessment framework that holds each deployment type — including OT/SCADA environments — to a consistent bar.
• Translate network and OT/ICS security risks into findings with clear severity and business impact; communicate them to security leadership and drive mitigations.
• Develop and maintain security documentation: network security standards, assessment runbooks, and detection coverage maps.
• Partner with infrastructure and site operations teams to implement network security mitigations and hardening measures.
• Contribute to incident response when network-based threats are detected, including containment, investigation, and post-incident improvement.

Requirements

• 5+ years of scripting, programming, and security code review in a common programming language.
• 5+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or equivalent experience in IT Security.
• Experience with network security, including one or more of: network architecture review, segmentation, firewall/ACL management, network detection, or network incident response.

Qualifications

• Experience with security in service-oriented architectures/microservices and web services.
• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience.
• Experience in security operations, risk management, and incident response.
• Experience with OT/ICS/SCADA network security, including segmentation between IT and OT environments.
• Experience with network detection and response (NDR) tools, network telemetry analysis, or packet-level investigation.
• Experience with network security in manufacturing, critical infrastructure, or industrial environments.
• Experience with AWS networking and security services (VPC, Security Groups, Transit Gateway, GuardDuty, CloudTrail).

Preferred Qualifications

• Experience with security in service-oriented architectures/microservices and web services.
• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience.
• Experience in security operations, risk management, and incident response.
• Experience with OT/ICS/SCADA network security, including segmentation between IT and OT environments.
• Experience with network detection and response (NDR) tools, network telemetry analysis, or packet-level investigation.
• Experience with network security in manufacturing, critical infrastructure, or industrial environments.
• Experience with AWS networking and security services (VPC, Security Groups, Transit Gateway, GuardDuty, CloudTrail).

Benefits

• Comprehensive benefits including health insurance, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage.
• 401(k) matching.
• Paid time off.
• Parental leave.

Pay

Base salary range for this position is $178,400.00 - $226,700.00 USD annually.

Schedule

Full-time.