Senior Security Engineer — Zero-Trust & Enclave Architect

Amazon Inc.; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

RSUs

Job summary

Amazon Inc. is seeking a Sr. Security Engineer to own the end-to-end threat model and translate it into concrete engineering deliverables.

You will work across the platform, reviewing runtime sandbox models, trust assumptions, API surface, and network layer encryption to ensure security by design. You will lead the attestation flow, encrypted workload delivery, and result integrity verification while collaborating with teams across compute environments and control planes.

Qualifications

• Experience in threat modeling and penetration testing or equivalent.
• Deep expertise in hardware attestation and cryptographic protocols.

Responsibilities

• Author the threat model for the platform architecture across compute nodes, network transit, and control plane.
• Design and implement the attestation flow to verify node integrity before workloads are dispatched.
• Specify and validate encrypted workload delivery, protecting model weights and inputs/outputs at rest and in transit.
• Build result integrity verification, lead security reviews, prep for penetration tests, and author compliance docs.

Skills

Threat modeling

Penetration testing

Zero-trust architectures

Hardware attestation

TPM/TEE

Cryptographic protocols

Security engineering

Mentor / tech lead

Secure APIs

Programming languages: Scala/Java/Pyth

Linux

Networking protocols

Tools

AWS Nitro Enclaves

Job description

Amazon Inc. is seeking a Sr. Security Engineer to own the end-to-end threat model and translate it into concrete engineering deliverables.

You will work across the platform, reviewing runtime sandbox models, trust assumptions, API surface, and network layer encryption to ensure security by design. You will lead the attestation flow, encrypted workload delivery, and result integrity verification while collaborating with teams across compute environments and control planes.