Sr. Security Engineer, Leo Security

We are open to hiring candidates to work out of one of the following locations:Redmond, WA, USALeo is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world.Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and to protect the integrity and confidentiality of our customer data. Our team drives the research & development, deployment and operation of several mission-critical security systems and mechanisms. You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization.Export Control RequirementDue to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.Key job responsibilitiesYou and your team own the vulnerability management program for Leo systems across a large and heterogeneous fleet. The discovery, prioritization, and remediation actions themselves run on Amazon-wide mechanisms; your responsibility is to make sure those mechanisms actually work for Leo's unique fleet requirements, that coverage and risk-based prioritization hold up against how our systems are really built, and that gaps get closed. You will drive resolution of the high-severity and systemic vulnerabilities that matter most by coordinating across the teams that own them, and you will lead the burn down of long-term technical debt and risk so the fleet gets measurably safer over time.You will be a guardian for security simplicity. Leo's builders should inherit security at scale in ways that are easy to consume and that do not pile on untold burden or distract from shipping a game-changing satellite internet service, and it is your job to make sure that promise holds. You will collect feedback from the builders living with these mechanisms, detect where security is becoming friction instead of a default, and push to simplify it, so that doing the secure thing stays the path of least resistance rather than a tax on building.You will partner with builder teams and their leaders as a trusted advisor, helping them understand their risk, define security priorities, and secure their systems without slowing their delivery. You will assess technical debt and risk alongside them, provide strategic direction that addresses vulnerabilities and fortifies our products, help leaders measure their organization's security execution, and guide teams toward outcomes that produce products which safely handle customer data. Beyond any single engagement, you will instill a security culture that makes secure practices a default rather than an afterthought, and you will mentor builders who aspire to become security advocates and security engineers through 1-1 sessions and office hours, growing the next generation of security talent across the organization.You will translate compliance and regulatory requirements into concrete, auditable engineering controls and evidence, keeping Leo continuously audit-ready rather than scrambling before each review. You will define and report the metrics that show whether the program is working, including coverage, time-to-remediate, SLA adherence, and residual risk, and you will use that data to drive decisions.A day in the lifeIn this highly dynamic role, you will join a team that is collectively accountable for where our security investments deliver the most value and most simplify security for Leo's builders. Together you will decide where to focus, challenge each other's priorities, and share the hard problems rather than carry them alone. No two days look the same, and the judgment the team brings to where it spends its attention is at the heart of the job.Teams will reach out for ideas on how to handle a wide variety of security problems, and you will be the person they trust to point them at the right answer. You can anticipate implementation questions like "What is the paved path for vulnerability management?", "This finding is flagged on my service but I think it is a false positive, how do I confirm it?", "I have a patch SLA I cannot meet without downtime, what are my options?", or "How do I keep this class of vulnerability from coming back?" You will help them cut through the noise, understand what actually matters for their systems, and get unblocked without slowing their delivery.When you are not responding to builder teams, you will step back and evaluate overall org performance to find the architectural defects behind recurring findings. Rather than chasing each ticket, you will look for the pattern underneath: a misconfiguration that keeps reappearing across the fleet, a dependency that drags a whole class of services below the bar, a gap in coverage where risk is going undetected. You will propose new security scanning capability and threat detections to close those gaps, and you will push to fix problems at the source so they stop generating work for everyone downstream.You will spend time in the data, reading the metrics that tell you whether the program is actually working: where remediation is stalling, which teams are trending the wrong way, where an SLA is about to slip, and where residual risk is concentrating. You will turn that signal into action, whether that means tuning how Amazon-wide mechanisms apply to Leo's fleet, driving a targeted campaign to burn down a specific risk, or raising a systemic issue to the leaders who own it. When a high-severity or systemic vulnerability lands, you will coordinate the response across every team that owns a piece of it and drive it to closure.Through all of it, you will help Amazon maintain a high bar for customer security. Every mechanism you tune, every gap you close, and every builder you unblock adds up to a fleet that is measurably safer and a security experience that stays simple enough that builders can keep shipping.About the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to buildexperience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.Basic qualifications- 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience- 5+ years of work in identifying security issues and risks, and developing mitigation plans experience- Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language- Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques- Experience as a mentor, tech lead or leading an engineering teamPreferred qualification - Experience applying threat modeling or other risk identification techniques or equivalent- Experience with security in service-oriented architectures/microservices and web servicesAmazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at .USA, WA, Redmond - 178,400.00 - 226,700.00 USD annually