Sr. Security Engineer, Leo Security

About This Role

This senior security engineering role focuses on securing an advanced satellite-based broadband telecom service, specifically the Leo initiative. The Security team is responsible for the end-to-end security of Leo's products and operations, providing infrastructure and mechanisms to protect the satellite constellation and customer data. The role involves working in a startup-like environment, leveraging Amazon's infrastructure to establish security mechanisms and foster a security-conscious culture within the organization.

Responsibilities

• Own the vulnerability management program for Leo systems across a large and heterogeneous fleet
• Ensure Amazon-wide vulnerability management mechanisms work for Leo's unique fleet requirements
• Verify coverage and risk-based prioritization align with system architecture
• Close gaps in vulnerability management processes
• Drive resolution of high-severity and systemic vulnerabilities by coordinating with owning teams
• Lead the burn down of long-term technical debt and risk to measurably improve fleet safety
• Act as a guardian for security simplicity, ensuring security at scale is easy to consume for builders
• Collect feedback from builders to detect where security creates friction and push for simplification
• Partner with builder teams and leaders as a trusted advisor to help them understand risk and define security priorities
• Secure systems without slowing delivery
• Assess technical debt and risk with builder teams
• Provide strategic direction to address vulnerabilities and fortify products
• Help leaders measure their organization's security execution
• Guide teams toward outcomes that produce products safely handling customer data
• Instill a security culture that makes secure practices a default
• Mentor builders aspiring to become security advocates and engineers through 1-1 sessions and office hours
• Translate compliance and regulatory requirements into concrete, auditable engineering controls and evidence
• Keep Leo continuously audit-ready
• Define and report metrics showing program effectiveness, including coverage, time-to-remediate, SLA adherence, and residual risk
• Use data to drive decisions
• Join a team collectively accountable for maximizing security investment value and simplifying security for Leo's builders
• Decide where to focus, challenge priorities, and share hard problems with the team
• Respond to builder teams with ideas on how to handle a variety of security problems
• Help builder teams understand what matters for their systems and get unblocked without slowing delivery
• Evaluate overall organizational performance to find architectural defects behind recurring findings