Security Engineer - Hardware, US ADC Security

Amazon - Annapolis Junction, MD

Full-time - Mid Level

Annapolis Junction, MD

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The U.S. Amazon Dedicated Cloud Information Security team is seeking an experienced Security Engineer to assess and test computer hardware, participate in security reviews, and enhance cloud architectures. This role involves providing technical guidance, working directly with customers, and applying engineering standards to both hardware and software systems. The position is hands-on, requiring daily activities such as facilitating security reviews, performing threat modeling, and addressing technical questions related to hardware implementations.

Responsibilities

• Providing security engineering solutions and support during customer-facing engagements, proactively addressing customer requirements while reducing risks.
• Working alongside a team of Security Engineers to assess and reduce risk while delivering security outcomes for customers.
• Enhancing a culture that holds a high quality security bar when building automated cloud infrastructure.
• Translating functional and technical requirements for hardware and software systems into detailed architecture and design.
• Providing recommendations and implementing solutions to hardware related challenges.

Requirements

• 2+ years experience in computer hardware and networking.
• 1+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, or Rust.
• 1+ years of non-internship professional software development experience.
• Experience designing, building, and deploying complex and scalable software and hardware solutions in production.
• Bachelor's degree in engineering or computer science, or equivalent work experience.
• Current, active US Government Security Clearance of TS/SCI with Polygraph.

Nice-to-haves

• Strong written and verbal communication skills with the ability to adapt messaging for technical and non-technical audiences.
• Experience setting up hardware environments for security evaluations, including configuring data center hardware components and network equipment.
• Experience with secure application development, including static and dynamic application security testing, vulnerability scanning, and mitigation.
• Understanding of software development and deployment practices, including continuous integration and delivery.
• Experience with AWS services.
• Experience in vulnerability management or security operations.
• Familiarity with hardware interfaces such as PCIe, JTAG, UART, I2C, SPI.
• Familiarity with software system interfaces such as gRPC and REST.
• Understanding of High Availability, Disaster Recovery, and Failover.

Benefits

• Flexible schedule to promote work-life balance.
• Employee-led affinity groups and ongoing learning experiences.
• Innovative benefit offerings.