Note: The job is a remote job and is open to candidates in USA. Amazon Web Services (AWS) provides cloud computing, security, storage, and other services at global scale. The Senior Security Engineer will secure foundational platforms including operating system kernels, virtualization, device emulation, firmware, and hardware through security reviews, threat modeling, tooling development, and penetration testing. The role also provides technical risk guidance, mentors junior engineers, and supports security training, documentation, and recruiting activities.
Responsibilities
- Security reviews for hardware including servers and devices
- Penetration testing & vulnerability research
- Threat modeling
- Security training and outreach to internal development teams
- Security guidance documentation
- Assistance with recruiting activities
Skills
- • Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
- • Experience in Security Engineering or Development of Security capabilities, supporting engineering projects from concept to delivery, and 2 years in two or more of the following technical categories:)
- • Experience in Virtualization security (Xen, KVM, QEMU)
- • Experience in Hardware security (PCB, JTAG, UART, SPI, ROM, microcode, custom ASIC/FPGA)
- • Experience in x86 and/or ARM chipset and firmware security (TPM, UEFI, TrustZone, Secure Boot, JTAG, PCIe)
- • Experience performing Security testing of compute platforms (Server, PC or Mobile)
- • Master's degree in Computer Science, Information Security, or a related field
- • Experience with AWS Services including EC2, Lambda, S3, DynamoDB, SQS
- • Knowledge of common security-relevant protocols like SSH, TLS, DNS, DHCP, NTP, or ICMP
- • Experience delivering against a large organization's long-term strategy and goals
- • Demonstrated understanding of crypto basics (encryption, signing, certificates, common algorithms)
- • Experience designing for crypto security (e.g. certificate handling and PKI, attestation, TPM/HSM)
- • Expert knowledge of Windows, Linux, and hypervisor security (especially in cloud environments)
- • Working with diverse physical tamper resistance and/or tamper detection techniques
- • Experience performing Physical security testing at the machine level
Benefits
- Sign-on payments
- Restricted stock units (RSUs)
- Health insurance, including medical, dental, vision, prescription, Basic Life & AD&D insurance, and an option for Supplemental life plans
- Employee Assistance Program (EAP)
- Mental Health Support
- Medical Advice Line
- Flexible Spending Accounts
- Adoption and Surrogacy Reimbursement coverage
- 401(k) matching
- Paid time off
- Parental leave
- Ongoing DEI events and learning experiences
- Knowledge-sharing, training, and other career-advancing resources
- Flexible work hours and arrangements
Company Overview
Company H1B Sponsorship