Hands-on AI Security Engineer — Production Systems

Amazon; Dallas (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

AWS Forward Deployed Engineering (FDE) is seeking a hands-on Security Engineer to join the security team securing production AI systems deployed at customer environments. You will review architectures, write tooling, and implement defenses while mentoring from senior engineers.

You will own security deliverables from your first engagement, contribute to playbooks, and collaborate with pod teams across deployments. This role requires US citizenship and up to 25% travel.

Qualifications

• 2+ years of any combination of threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in computer science or equivalent
• 2+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• 2+ years of work in identifying security issues and risks, and developing mitigation plans experience

Responsibilities

• Conduct security design reviews, code reviews, and architecture assessments for production AI systems (agentic workflows, RAG pipelines, orchestration layers, model integrations) under guidance from senior security engineers
• Perform threat modeling and penetration testing for AI/ML applications deployed in customer environments; identify vulnerabilities and work with FDE engineers to implement fixes before production release
• Build and maintain security automation: scanning tools, CI/CD security gates, guardrail testing scripts, secrets detection, and dependency vulnerability checks for forward-deployed AI systems
• Implement security controls for AI-specific threats: prompt injection prevention, output filtering, data isolation, model API endpoint hardening, and guardrail configuration
• Support security incident response for FDE-delivered production AI systems; assist with triage, root cause analysis, and remediation under senior engineer guidance
• Document security findings, patterns, and remediation guidance as reusable playbooks and runbooks that benefit future FDE engagements
• Contribute to the FDE security accelerator library: reusable modules, templates, and reference configurations that help FDE engineers build secure AI systems faster
• Requires up to 25% travel

Skills

Threat modeling

Secure coding

Identity management

Scripting

Security code review

Python

C/C++

Go

Programming languages

Education

Bachelor's degree in computer science or equivalent

Tools

AWS technologies

Job description

AWS Forward Deployed Engineering (FDE) is seeking a hands-on Security Engineer to join the security team securing production AI systems deployed at customer environments. You will review architectures, write tooling, and implement defenses while mentoring from senior engineers.

You will own security deliverables from your first engagement, contribute to playbooks, and collaborate with pod teams across deployments. This role requires US citizenship and up to 25% travel.