Senior Security Engineer, Special Projects - Zero-Trust Pro

Amazon Inc.; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon.com Services LLC is seeking a Senior Security Engineer for Special Projects in Seattle, WA. You will craft threat models for distributed workloads, design node attestation flows, and ensure encrypted delivery of model weights and data across trusted and untrusted environments.

You will lead security reviews, prepare for penetration testing, and author compliance documentation while collaborating with a cross-functional team to push the boundaries of secure, scalable infrastructure.

Qualifications

• Knowledge of at least two of the listed languages (Scala, Java, Python, C/C++, Go).
• Experience troubleshooting systems, analyzing logs, or automating tasks with command line tools.
• Experience identifying security vulnerabilities, attack patterns, and remediation techniques.
• Experience as a mentor or tech lead on an engineering team.
• Experience with threat modeling and penetration testing; strong analytical, detail-oriented, and communication skills; Linux and networking knowledge.
• Deep expertise in hardware attestation (TPM, TEE, secure enclaves) and cryptographic protocols.
• 7+ years in security engineering, with at least 3 years in systems or infrastructure security.
• Strong understanding of zero-trust architectures and practical implementation.
• Experience with secure API design, authentication, and authorization frameworks.

Responsibilities

• Author the threat model for the platform architecture, identifying attack surfaces across compute nodes, network transit, and the control plane.
• Design and implement the attestation flow that verifies node integrity before workloads are dispatched, leveraging TPM/TEE where available and defining fallback assurance levels.
• Specify and validate encrypted workload delivery, ensuring model weights and inference inputs/outputs are protected at rest and in transit.
• Build result integrity verification mechanisms, conduct security reviews, lead penetration test preparation, and author compliance documentation.

Skills

Scala

Java

Python

C/C++

Go

Linux

Networking protocols

Threat modeling

Mentoring

Zero-trust architectures

Security engineering

Secure API design

Job description

Amazon.com Services LLC is seeking a Senior Security Engineer for Special Projects in Seattle, WA. You will craft threat models for distributed workloads, design node attestation flows, and ensure encrypted delivery of model weights and data across trusted and untrusted environments.

You will lead security reviews, prepare for penetration testing, and author compliance documentation while collaborating with a cross-functional team to push the boundaries of secure, scalable infrastructure.