Build result integrity verification mechanisms, conduct security reviews, lead penetration test preparation, and author compliance documentation.
About the team
Amazon Special Projects is building distributed infrastructure that operates across compute environments Amazon does not fully control. That sentence alone should tell you why this role matters. You will design the trust model that makes this architecture viable: ensuring that workloads are protected, results are verifiable, and the platform meets a bar that earns the confidence of internal and external customers. Security is not a layer we bolt on — it is a constraint that shapes every design decision from day one.
Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
Experience as a mentor, tech lead or leading an engineering team
Experience with threat modeling and penetration testing, or experience that includes strong analytical skills, attention to detail, and effective communication abilities and experience in Linux and Networking protocols
Deep expertise in hardware attestation (TPM, TEE, secure enclaves) and cryptographic protocols
7+ years of experience in security engineering, with at least 3 years focused on systems or infrastructure security
Strong understanding of zero-trust architectures and their practical implementation
Experience with secure API design, authentication, and authorization frameworks
Experience applying threat modeling or other risk identification techniques or equivalent
Knowledge of cloud computing services and deployment architecture
Experience performing technical audits/assessments in direct support of a major compliance effort (e.g., ISO, NIST, SOX, PCI, HIPAA, GDPR and other regulatory/industry certifications)
Experience securing edge or distributed platforms where hardware is not under direct organizational control
Background in secure enclave programming (Intel SGX, ARM TrustZone, or AWS Nitro Enclaves)
Familiarity with ML model protection, including model watermarking or obfuscation techniques
Published research or patents in applied cryptography, remote attestation, or secure computation
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually
