Security Engineer SoC

About the Role

• Opportunity to find security issues in chips and low-level software for Amazon digital products.
• Ability to find bugs in chips through design and code review, and by performing tests.

Key Responsibilities

• Guide secure development of devices at Amazon, from security design, threat modeling to code reviews, security testing and fuzzing.
• Propose, research, and develop tools and techniques to improve device security posture at scale.
• Provide technical security expertise and consultation to device product teams.
• Identify security risks and collaborate with product engineers to create mitigations.
• Develop new security policies and procedures.
• Empower others to improve their security acumen by promoting awareness and developing training materials.
• Participate in projects that develop new intellectual property.

About the Team

• The Security team is responsible for identifying security flaws and guiding device businesses to achieve secure hardware architecture for chips used in Amazon devices (e.g., Fire TV, Eero, Alexa, Ring).
• The team partners with business teams and performs chip-level security testing, secure chip architecture design and advisory, system review, and security review for Secure boot code, bootloader code, and firmware.

Requirements & Tech Stack

• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits.
• Experience with web protocols, common security attacks, and remediation (non-internship).
• Experience solving basic problems by writing code or scripts with some assistance.

Preferred Qualifications

• Experience with AWS services or other cloud offerings.