Embedded Security Engineer - Devices and Services

Amazon; Sunnyvale (CA); On-site; USD 166,600 - 212,800; Full time

Job summary

Amazon seeks a security engineer for the Device & Services Security team to identify and remediate security issues in embedded and low‑level software across devices. You will engage with Zoox and other DSS portfolio teams, building threat models, performing secure code reviews, and developing automation to harden production systems.

Responsibilities include risk assessments, security training for developers, and contributing to security design across software delivery.

Qualifications

• Bachelor's degree in a STEM field or equivalent IT security experience.
• 3+ years of threat modeling, secure coding, identity management/auth, software development, cryptography, system administration and network security.
• 3+ years of programming in Python, Ruby, Go, Swift, Java, .NET, C++ or similar OO languages.
• 3+ years troubleshooting systems issues, analyzing logs, or automating basic tasks using CLI tools.
• Knowledge of common security vulnerabilities and remediation techniques.

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Perform design reviews and risk assessments for new or existing production infrastructure
• Enhance existing systems to detect mis-configurations within large deployments
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes

Skills

Threat modeling

Secure coding

Security automation

Python

Java

JavaScript

Education

Bachelor's degree in STEM

Tools

AWS

Job description

Amazon seeks a security engineer for the Device & Services Security team to identify and remediate security issues in embedded and low‑level software across devices. You will engage with Zoox and other DSS portfolio teams, building threat models, performing secure code reviews, and developing automation to harden production systems.

Responsibilities include risk assessments, security training for developers, and contributing to security design across software delivery.