Senior Device Security Engineer – OS & Firmware

Amazon; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Devices is seeking a leader for its OS platform Security team to guide security across Echo, FireTV, tablets, cameras and other devices. You will oversee threat modeling, design reviews, and security testing to help protect customers.

The role emphasizes developing mitigation strategies, tooling, and training to improve the security posture of devices at scale. Collaboration with product teams and cross-functional security experts is essential.

Qualifications

• Bachelor's degree in a related field.
• 5+ years identifying security issues and developing mitigations.
• Strong knowledge of OS internals, Linux and RTOS.
• Familiarity with vulnerability research and PoCs.
• Experience with network security, cryptography and app security.
• Security code review experience in C.

Responsibilities

• Guide the software development lifecycle of devices from security design to code reviews and fuzzing.
• Analyze the security of platform components in consumer devices.
• Develop tools and techniques to improve device security at scale.
• Provide security expertise to device product teams.
• Identify risks and work with engineers to mitigate them.
• Develop new security policies and procedures.
• Promote security awareness and training materials.

Skills

Security analysis

OS internals

Network security

Cryptography

Security review (C)

Education

Bachelor's degree

Tools

C/C++

Assembly

Python

Bash

Job description

Amazon Devices is seeking a leader for its OS platform Security team to guide security across Echo, FireTV, tablets, cameras and other devices. You will oversee threat modeling, design reviews, and security testing to help protect customers.

The role emphasizes developing mitigation strategies, tooling, and training to improve the security posture of devices at scale. Collaboration with product teams and cross-functional security experts is essential.