Amazon Leo is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world.

We are a specialized security team that sits inside a global satellite communications business. Our job is to make sure security lessons become permanent: when a security event happens, we find the root cause, close the immediate gap, and build the mechanism that keeps it closed. We watch across the whole environment, spot the trends others are too busy to chase, and turn them into initiatives that measurably reduce risk.

We work shoulder to shoulder with the builder teams designing, launching, and operating the product, and we partner closely with incident response, detection, and enterprise security functions. Over the coming years our focus is shifting further upstream: getting ahead of incidents through proactive posture improvement, hunting for gaps before they are exploited, and investing in automation so security scales with the business rather than against it. If you want your work to protect customers of a system being built at a scale few companies attempt, you will find that purpose here.

Export Control Requirement

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national.

Key job responsibilities

You will analyze the security events observed across Amazon Leo, separating each one into the immediate fixes it demands and the longer-term, systemic trends it reveals across the organization.

You will prioritize this work by the severity and business impact of the threat to Leo, concentrating your effort on the most serious security issues and making sound risk-based trade-offs to deliver against them on time.

You will drive immediate fixes to closure by identifying the right team or individual to own each task, and by creating the mechanisms needed to ensure security outcomes are prioritized and tracked to completion across teams with competing priorities.

You will lead time-boxed Find and Fix missions to investigate and clarify emerging security trends, turning early and ambiguous signals into a validated understanding of the underlying problem.

You will own security initiatives end-to-end that resolve the root cause of systemic trends, favoring centralized, secure-by-default controls that measurably and durably reduce risk across the organization.

A day in the life

In this highly dynamic role, you will decide where your time investments deliver the most security value, balancing proactive posture-improvement work against reactive support when security events arise. Teams across the business will reach out for guidance on a wide variety of security problems, and you can anticipate questions like:

"What's the right way to handle authentication tokens in service-to-service communications?"

"We're planning a confidential new product launch and need to define its security requirements."

"We just had a security event and need to run a root cause analysis to identify and correct what produced it."

When you're not responding to builder teams, you will evaluate overall security posture across the organization to surface architectural defects, hunt for gaps before they become incidents, and propose new security initiatives that correct systemic problems. Through this blend of consultation, investigation, and long-term mechanism building, you will help maintain a high bar for customer security.

BASIC QUALIFICATIONS

- Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 4+ years of IT Security experience

- 1+ years of cloud based solution (AWS or equivalent), system, network and operating system experience

- Experience driving security programs across large diverse organizations

- 3+ years of any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing experience

- 1+ years experience using AI to automate security.

- This position requires U.S. citizenship in order to access AWS GovCloud

PREFERRED QUALIFICATIONS

- Experience working in identifying security issues and risks, and developing mitigation plans

- Experience in threat hunting, detection engineering, or product/application security, including moving from a security hypothesis to a validated detection, control, or remediation within a time-boxed engagement

- Experience owning security remediation initiatives end-to-end, including scoping the problem, driving cross-team execution without direct authority, and measuring the resulting outcome

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CA, San Francisco - 166,600.00 - 212,800.00 USD annually