Sr Security Engineer, Supply Chain, Leo Security

About the role

Amazon Leo is a constellation of Low Earth Orbit satellites delivering high-speed broadband connectivity to unserved and underserved communities worldwide. We are looking for a Systems Security Engineer to join the Leo Infrastructure and IP Security team.

Responsibilities

• Conduct threat modeling for supply chain and manufacturing environments, including OT/ICS and AI-integrated topologies, and translate identified risks into findings with clear severity ratings and remediation guidance.
• Plan and lead onsite security assessments at supplier and contract manufacturer facilities, evaluating cybersecurity controls, physical security posture, and operational practices against {NAME}'s supplier security requirements.
• Contribute to maturing the supply chain security program by refining assessment methodology, scoring criteria, standards, and operational processes as the supplier portfolio expands.
• Develop AI-assisted tooling to automate evidence collection, finding triage, and report generation, improving the efficiency and consistency of the assessment workflow.
• Partner with infrastructure, site operations, procurement, and hardware engineering teams to implement network security mitigations and ensure security requirements are embedded in supplier contracts.

Qualifications

• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 5+ years of experience in security engineering, security assessments, or security operations (non-internship)
• Experience conducting security assessments or audits — including evaluating cybersecurity and physical security controls.
• Knowledge of security frameworks and standards (e.g., NIST 800-53, NIST 800-161, ISO 27001, NIST 800-171, or equivalent)
• Ability to document findings, develop risk ratings, and communicate complex security concepts to both technical and non-technical audiences

Preferred Qualifications

• Experience with supply chain risk management (SCRM) programs, third-party risk assessment, or vendor security evaluation
• Experience conducting physical security assessments at manufacturing or industrial facilities (access controls, camera systems, visitor management, secure storage, environmental controls)
• Experience assessing cybersecurity controls in manufacturing, hardware, or operational technology environments
• Familiarity with supply chain security regulations and frameworks (NIST 800-161, NISTIR 8276, FAR/DFARS, CMMC, ITAR/EAR)
• Experience working with or assessing suppliers in regulated industries (electronics manufacturing, contract manufacturing, or hardware supply chain)
• Willingness to travel to supplier sites (domestic and international)