Sr. Security Engineer, Hardware Security Research, InfraSec-HLS

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure, supporting all AWS data centers and infrastructure worldwide.
Security
Senior Software Engineer
In-Person
5,000+ Employees
5+ years of experience
Enterprise SaaS · Cybersecurity

Description For Sr. Security Engineer, Hardware Security Research, InfraSec-HLS

AWS Infrastructure Services is seeking a Senior Security Engineer to join their Infrastructure Security – Threat team. This role is crucial in ensuring the security of AWS's global infrastructure through hardware security research and vulnerability testing.

The position involves deep technical work in security testing, code analysis, and vulnerability research across AWS's infrastructure components. You'll be responsible for conducting security assessments of both software and hardware components, developing fuzzing tools, and identifying potential security risks before they can impact AWS services.

As a Sr. Security Engineer, you'll work with cutting-edge technology and handle complex security challenges at massive scale. The role combines hands-on technical work with strategic security planning, requiring both deep technical expertise and strong communication skills.

Key aspects of the role include:

  • Conducting detailed source code reviews across multiple programming languages
  • Performing black-box security testing of hardware and software components
  • Developing and implementing advanced fuzzing techniques
  • Creating proof-of-concept demonstrations for security vulnerabilities
  • Collaborating with AWS engineering teams to improve security practices

The ideal candidate will bring strong security expertise, excellent problem-solving abilities, and a passion for finding and fixing security vulnerabilities. You'll be joining a team that values work-life balance, diversity, and continuous learning.

This role offers the opportunity to work on critical security infrastructure that powers AWS's global operations. You'll be at the forefront of cloud security, working with senior technical leaders and having direct impact on AWS's security posture.

The position is based in Herndon, VA, and offers competitive benefits including medical, dental, and vision insurance, along with professional development opportunities and a collaborative work environment focused on innovation and security excellence.

Last updated 7 minutes ago

Responsibilities For Sr. Security Engineer, Hardware Security Research, InfraSec-HLS

  • Manually audit source code of infrastructure services and software
  • Audit security risk of vendor-provided hardware and software
  • Develop fuzz test harnesses using tools like AFL++, LibFuzzer and honggfuzz
  • Write proof-of-concept code to demonstrate security issues
  • Provide clear communication on security issues to developers
  • Partner with AWS developers to improve application security
  • Provide long term risk mitigation guidance
  • Work with senior engineers to assess high risk attack surfaces
  • Present risk assessment reports to Directors and VPs

Requirements For Sr. Security Engineer, Hardware Security Research, InfraSec-HLS

Go
Java
JavaScript
Python
Rust
  • CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ or GCED or GICSP or PenTest+
  • Experience with code analysis in C, C++, Java, Go, Python, JavaScript, Rust
  • Experience with security vulnerability testing and fuzzing
  • Experience with proof-of-concept code development
  • Bachelor's degree preferred

Benefits For Sr. Security Engineer, Hardware Security Research, InfraSec-HLS

Medical Insurance
Dental Insurance
Vision Insurance
  • Work-life balance
  • Flexible working culture
  • Career development opportunities
  • Mentorship programs
  • Inclusive team culture
  • Employee-led affinity groups

Interested in this job?

Jobs Related To Amazon Sr. Security Engineer, Hardware Security Research, InfraSec-HLS

Senior Security Intelligence Engineer, Incident Response Threat Intelligence, ACTI, ACTI

Senior Security Intelligence Engineer role at Amazon focusing on cyber threat intelligence, incident response, and security analysis, requiring strong technical and analytical skills.

Software Development Engineer III, Devices & Services Security

Senior Software Engineer role at Amazon focusing on security engineering for consumer devices and services, requiring 7+ years of experience and offering competitive compensation.

Security Engineer, AWS Security Vulnerability Management

Senior Security Engineer role at Amazon AWS focusing on vulnerability management, requiring 4+ years of experience in security engineering and software development.

Senior Security Engineer, Corporate Services Security, Corporate Services Security

Senior Security Engineer role at Amazon's Corporate Services Security team, focusing on protecting corporate services and systems through application security, threat modeling, and security architecture.

Senior Security Engineer, Corporate Services Security, Corporate Services Security

Senior Security Engineer role at Amazon's Corporate Services Security team, focusing on protecting corporate systems through application security, threat modeling, and security architecture.