Security Engineer - Hardware, US ADC Security

Amazon - Annapolis, MD

Full-time - Mid Level

Annapolis, MD

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The U.S. Amazon Dedicated Cloud Information Security team is seeking an experienced Security Engineer with expertise in assessing and testing computer hardware. This role involves participating in security reviews of hardware components and infrastructure, enhancing cloud architectures, and providing technical guidance to influence project direction. The position requires hands-on involvement in security reviews, threat modeling, and addressing technical questions related to hardware implementations.

Responsibilities

• Providing security engineering solutions and support during customer-facing engagements, proactively addressing customer requirements while reducing risks.
• Working alongside a team of Security Engineers to assess and reduce risk while delivering security outcomes for customers.
• Enhancing a culture that holds a high quality security bar when building automated cloud infrastructure.
• Translating functional and technical requirements for hardware and software systems into detailed architecture and design.
• Providing recommendations and implementing solutions to hardware related challenges.

Requirements

• 2+ years experience in computer hardware and networking.
• 1+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, or Rust.
• 1+ years of non-internship professional software development experience.
• Experience designing, building, and deploying complex and scalable software and hardware solutions in production.
• Bachelor's degree in engineering or computer science, or equivalent work experience.
• Current, active US Government Security Clearance of TS/SCI with Polygraph.

Nice-to-haves

• Strong written and verbal communication skills with the ability to adapt messaging for technical and non-technical audiences.
• Experience setting up hardware environments for security evaluations, including configuring data center hardware components and network equipment.
• Experience with secure application development, including static and dynamic application security testing and vulnerability scanning.
• Understanding of software development and deployment practices, including continuous integration and delivery.
• Experience with AWS services.
• Experience in vulnerability management or security operations.
• Familiarity with hardware interfaces such as PCIe, JTAG, UART, I2C, SPI.
• Familiarity with software system interfaces such as gRPC and REST.
• Understanding of High Availability, Disaster Recovery, and Failover.

Benefits

• Flexible schedule to promote work-life balance.
• Employee-led affinity groups for diversity and inclusion.
• Annual learning experiences and conferences on diversity topics.