Career EngineCareer Engine
Your matchExample
83%match
Why you fitThis role calls for Threat Modeling and Hardware Attestation — tell us what you know and we'll check the rest.
Gap to noteAlso lists Tpm — worth confirming before you apply.

Get roles like this, scored and matched, in your inbox.

Sign up free →

Job Opening

Amazon logo

Senior Security Engineer, Special Projects

Amazon · Seattle, WA · Posted 10 days ago

$178k–$227kic
7+ yrs expThreat ModelingHardware AttestationTPMTEECryptographic ProtocolsZero-Trust ArchitectureSecure API DesignAuthentication

Design the trust model for distributed infrastructure running on compute Amazon does not fully control, owning the threat model from end to end on a Special Projects team building entirely new products.

Innovators wanted! Are you an entrepreneur? A builder? A dreamer? This role is part of an Amazon Special Projects team that takes the company’s Think Big leadership principle to the extreme. We focus on creating entirely new products and services with a goal of positively impacting the lives of our customers. No industries or subject areas are out of bounds. We launched products such as Comprehend Medical, Echo Frames and Amazon Explore. If you’re interested in innovating at scale to address big challenges in the world, this is the team for you.

As the Sr. Security Engineer, you will own the end-to-end threat model and translate it into concrete engineering deliverables: hardware attestation for compute nodes, encrypted workload delivery, result integrity verification, API authentication, and workload isolation guarantees. You will work across every component — reviewing the runtime's sandbox model, the scheduler's trust assumptions, the API surface, and the network layer's encryption — to ensure the system is secure by design.

Key job responsibilities

  • Author the threat model for the platform architecture, identifying attack surfaces across compute nodes, network transit, and the control plane.
  • Design and implement the attestation flow that verifies node integrity before workloads are dispatched, leveraging TPM/TEE where available and defining fallback assurance levels.
  • Specify and validate encrypted workload delivery, ensuring model weights and inference inputs/outputs are protected at rest and in transit.
  • Build result integrity verification mechanisms, conduct security reviews, lead penetration test preparation, and author compliance documentation.

…

Apply on Amazon's site →

This posting is sourced from Amazon's own career site — applying takes you there directly.

Get roles like this, scored and matched, in your inbox.

Sign up free →

Related roles

There are 17,473 open roles at Amazon right now. This role is one of 68 Security Engineer openings in Seattle, WA and centers on Threat Modeling, Hardware Attestation, Tpm, and Tee.

Want roles like this found for you?

Set your Focus once. Career Engine screens every new opening every week.

A scored, explained shortlist — not a keyword match — delivered weekly. Free for one profile.