Senior Network Security Engineer — OT/ICS & Ground Stations

Amazon; Herndon (VA); On-site; USD 178,000 - 227,000; Full time

Job summary

Amazon Leo is seeking a senior security engineer to own network security across Leo's IT, OT/SCADA, lab, launch operations and ground stations. You will define security bar for deployments and drive detections into production with automation.

You will partner with infrastructure teams to implement mitigations, translate risks into actionable findings, and contribute to incident response while maintaining security docs and standards.

Qualifications

• 5+ years of scripting, programming, and security code review (non-internship) experience.
• 5+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security.
• Knowledge of industry-based security vulnerabilities and remediation techniques.
• Experience with network security, including one or more of: network architecture review, segmentation, firewall/ACL management, network detection, or network incident response.

Responsibilities

• Analyze and deploy detections to production networks, leveraging automation and tooling to identify vulnerabilities and surface security events.
• Conduct threat modeling for network deployments across environments and locations, including OT/ICS topologies.
• Build and maintain a network security assessment framework that holds each deployment type to a consistent bar.
• Translate network and OT/ICS security risks into findings with clear severity and business impact; communicate them to security leadership and drive mitigations.
• Develop and maintain security documentation: network security standards, assessment runbooks, and detection coverage maps.
• Partner with infrastructure and site operations teams to implement network security mitigations and hardening measures.
• Contribute to incident response when network-based threats are detected, including containment, investigation, and post-incident improvement.

Skills

Scripting

Programming

Security code review

Troubleshooting

Networking fundamentals

Network security

Threat modeling

Incident response

Education

Bachelor's degree in STEM

Tools

VPC/Security Groups

Transit Gateway

GuardDuty

CloudTrail

Job description

Amazon Leo is seeking a senior security engineer to own network security across Leo's IT, OT/SCADA, lab, launch operations and ground stations. You will define security bar for deployments and drive detections into production with automation.

You will partner with infrastructure teams to implement mitigations, translate risks into actionable findings, and contribute to incident response while maintaining security docs and standards.