Senior Security Engineer, Special Projects - Threat & Trust

VulnU; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Paid parental leave

Equity

Retirement match

Flexible PTO

Job summary

Amazon in Seattle, WA is seeking a Senior Security Engineer for Special Projects to own end-to-end threat modeling across the platform. You will design hardware attestation flows, encrypted workload delivery, and result integrity verification, ensuring secure by design across compute, network, and control planes.

You will mentor engineers, lead security reviews, and collaborate on threat modeling, zero-trust architectures, and compliant security practices for distributed infrastructure with

Qualifications

• 7+ years in security engineering focused on systems or infrastructure
• Experience with threat modeling and penetration testing
• Strong knowledge of zero-trust architectures and secure API design
• Experience securing edge or distributed platforms with hardware not under direct control
• Familiarity with ML model protection and secure computation

Responsibilities

• Author the threat model for platform architecture
• Design and implement attestation flow for node integrity
• Specify encrypted workload delivery and protect data at rest/in transit
• Build result integrity verification and lead security reviews
• Lead Penetration Test preparation and compliance documentation

Skills

Threat modeling

Zero-trust

Security engineering

Mentor / team lead

Linux networking

Cryptographic protocols

Secure enclaves

Cloud security

Tools

TPM/TEE

SGX / TrustZone

AWS Nitro Enclaves

Job description

Amazon in Seattle, WA is seeking a Senior Security Engineer for Special Projects to own end-to-end threat modeling across the platform. You will design hardware attestation flows, encrypted workload delivery, and result integrity verification, ensuring secure by design across compute, network, and control planes.

You will mentor engineers, lead security reviews, and collaborate on threat modeling, zero-trust architectures, and compliant security practices for distributed infrastructure with