Sr. Security Engineer, Leo Security

Amazon Inc.; Redmond (WA); Presencial; USD 140.000 - 210.000; Jornada completa

Descripción de la vacante

Amazon's Leo Security team is seeking a security leader to own vulnerability management across Leo's fleet, driving prioritization and remediation with cross-team collaboration.

You will simplify security for builders, mentor engineers to become security advocates, translate compliance into auditable controls, and define metrics to show progress while guarding customer data across a global satellite service.

Formación

• Experience leading vulnerability management programs across complex fleets.
• Ability to coordinate remediation across multiple teams and systems.
• Strong understanding of security control design and compliance requirements.

Responsabilidades

• Own the vulnerability management program for Leo systems across a large fleet, driving discovery, prioritization and remediation.
• Champion security simplicity to reduce friction for builders and ensure secure-by-default practices.
• Mentor builders to become security advocates and engineers through coaching and office hours.
• Translate compliance and regulatory requirements into auditable engineering controls and report metrics.

Conocimientos

Vulnerability management

Cross-team coordination

Security governance

Threat prioritization

Mentoring

Descripción del empleo

Locations

We are open to hiring candidates to work out of one of the following locations: Redmond, WA, USA.

Company Overview

Leo is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world.

Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and to protect the integrity and confidentiality of our customer data. Our team drives the research & development, deployment and operation of several mission-critical security systems and mechanisms. You will work in a start-up like environment, backed by Amazon's infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization.

Export Control Requirement

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Key job responsibilities

You and your team own the vulnerability management program for Leo systems across a large and heterogeneous fleet. The discovery, prioritization, and remediation actions themselves run on Amazon-wide mechanisms; your responsibility is to make sure those mechanisms actually work for Leo's unique fleet requirements, that coverage and risk-based prioritization hold up against how our systems are really built, and that gaps get closed. You will drive resolution of the high-severity and systemic vulnerabilities that matter most by coordinating across the teams that own them, and you will lead the burn down of long-term technical debt and risk so the fleet gets measurably safer over time.

You will be a guardian for security simplicity. Leo's builders should inherit security at scale in ways that are easy to consume and that do not pile on untold burden or distract from shipping a game-changing satellite internet service, and it is your job to make sure that promise holds. You will collect feedback from the builders living with these mechanisms, detect where security is becoming friction instead of a default, and push to simplify it, so that doing the secure thing stays the path of least resistance rather than a tax on building.

You will partner with builder teams and their leaders as a trusted advisor, helping them understand their risk, define security priorities, and secure their systems without slowing their delivery. You will assess technical debt and risk alongside them, provide strategic direction that addresses vulnerabilities and fortifies our products, help leaders measure their organization's security execution, and guide teams toward outcomes that produce products which safely handle customer data. Beyond any single engagement, you will instill a security culture that makes secure practices a default rather than an afterthought, and you will mentor builders who aspire to become security advocates and security engineers through 1-1 sessions and office hours, growing the next generation of security talent across the organization.

You will translate compliance and regulatory requirements into concrete, auditable engineering controls and evidence, keeping Leo continuously audit-ready rather than scrambling before each review. You will define and report the metrics that show whether the program is working, including coverage, time-to-remediate, SLA adherence, and residual risk, and you will use that data to drive decisions.

A day in the life

A highly dynamic role, you will join a team that is collectively accountable for where our security investments deliver the most value and most simplify security for Leo's builders. Together you will decide where to focus, challenge each other's priorities, and share the hard problems rather than carry them alone. No two days look the same, and the judgment the team brings to where it spends its attention is at the heart of the job.

Teams will reach out for ideas on how to handle a wide variety of security problems, and you will be the person they trust to point them at the right answer. You can anticipate implementation questions like "What is the paved path for vulnerability management?", "This finding is flagged on my service but I think it is a false positive, how do I confirm it?", "I have a patch SLA I cannot meet without downtime, what are my options?", or "How do I keep this class of vulnerability from coming back?" You will help them cut through the noise, understand what actually matters for their systems, and get unblocked without slowing their delivery.

When you are not responding to builder teams, you will step back and evaluate overall org performance to find the architectural defects behind recurring findings. Ra