Senior Security Engineer, Device Platform Security Team

Socket.dev; Sunnyvale (CA); On-site; USD 183,000 - 248,000; Full time

Job summary

Amazon Devices is seeking a security-focused engineer to help secure its OS platform across Echo, Fire TV, Kindle, Ring, Blink and more. You will influence the software development lifecycle from design to testing. You will analyze platform security, develop mitigations, and promote security training across product teams.

This role blends hands-on security with cross-team leadership. Join a team responsible for empowering secure products and protecting customers, with opportunities to shape

Qualifications

• Bachelor's degree in a relevant field.
• 5+ years identifying security issues and developing mitigations.
• Strong knowledge of OS internals, especially Linux and RTOS.
• Experience with vulnerability research and remediation and PoCs.
• Experience with network security, cryptography, and application security.
• Security code review experience in C.

Responsibilities

• Guide the software development lifecycle from security design to code review and fuzzing.
• Analyze security of the platform components of consumer devices.
• Propose and develop tools to improve device security at scale.
• Provide security expertise to device product teams.
• Identify security risks and work with engineers to implement mitigations.
• Develop new security policies and procedures.
• Promote security awareness and training materials.

Skills

Security design

Threat modeling

Security testing

Code review (C)

Network security

Vulnerability research

Education

Bachelor's degree

Tools

C/C++

Python

Ruby

Perl

Bash

Assembly

Job description

Amazon Devices is an inventive research and development organization that designs and engineers high-profile consumer electronics. Starting with the best-selling Kindle family of products, Amazon Devices developed and produced ground-breaking devices like Amazon Echo products, Fire tablets, Fire TV, Astro, Halo, Ring Doorbells, Blink Cameras and more.

The Role

Are you interested in being part of a top-notch security team covering all Amazon devices? If you want to keep customers safe, then we have a job for you! Amazon's Device Security Platform team is growing and looking for strong leaders.

In this role, you will work in the OS platform Security team for Amazon devices like Echo, FireTV, Fire tablets, Ring and Blink doorbells, cameras, drones, wearables, Kindle readers, and automotive security.

Key job responsibilities

• Help guide the software development lifecycle of devices at Amazon, from security design, threat modeling to code reviews, security testing and fuzzing
• Be responsible for analyzing the security of the platform components of consumer devices
• Propose, research and develop tools and techniques to improve the security posture of devices at scale
• Provide technical security expertise and consultation to device product teams
• Identify security risks and work with product engineers to create mitigations
• Develop new security policies and procedures
• Empower others to improve their security acumen by promoting awareness and developing training materials

About the team

We are responsible for empowering and enabling the organizations of Amazon Devices to develop and build secure products, including responding to public vulnerabilities and reviewing or co-developing security features to protect customers.

Basic Qualifications

• Bachelor's degree
• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• Knowledge of operating system internals, with emphasis on Linux and common RTOS environments
• Familiarity with system security vulnerability research and remediation techniques and the development of exploit PoCs
• Experience with network security and authentication protocols, cryptography, and application security
• Security code review experience in C

Preferred Qualifications

• Experience applying threat modeling or other risk identification techniques or equivalent
• Knowledge of Android OS internals
• Experience with coding in C/C++, assembly languages and scripting (e.g. , Ruby, Perl, Python, Bash)
• Experience with fundamentals of common wireless connectivity protocols (e.g. Bluetooth, WiFi, Zigbee, Thread)
• Knowledge of hardware security mechanisms, including secure boot and trusted execution environments

Equal opportunity

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.

Benefits and Compensation

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CA, Sunnyvale - 183,000.00 - 247,600.00 USD annually

USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually