Security Engineer, Forward Deployed Engineering, AWS Forward Deployed Engineering

Amazon.com Services LLC has this job in 1 other place

Boston, Massachusetts, USA

The role

AWS Forward Deployed Engineering (FDE) embeds AI engineers directly inside strategic enterprise customers to design, build, and deploy production-grade AI systems. We are looking for a Security Engineer to join the FDE security team and help secure production AI systems deployed in customer environments.

You will conduct security reviews, write security tooling, perform threat modeling, and implement controls that protect AI systems built by FDE engineers. You work alongside FDE delivery pods in customer environments, getting hands-on with production code, cloud infrastructure, and AI/ML pipelines. You learn fast, ship fast, and build security into the system rather than bolting it on after the fact.

What you will do

Conduct security design reviews, code reviews, and architecture assessments for production AI systems (agentic workflows, RAG pipelines, orchestration layers, model integrations) under guidance from senior security engineers
Perform threat modeling and penetration testing for AI/ML applications deployed in customer environments; identify vulnerabilities and work with FDE engineers to implement fixes before production release
Build and maintain security automation: scanning tools, CI/CD security gates, guardrail testing scripts, secrets detection, and dependency vulnerability checks for forward-deployed AI systems
Implement security controls for AI-specific threats: prompt injection prevention, output filtering, data isolation, model API endpoint hardening, and guardrail configuration
Support security incident response for FDE-delivered production AI systems; assist with triage, root cause analysis, and remediation under senior engineer guidance
Document security findings, patterns, and remediation guidance as reusable playbooks and runbooks that benefit future FDE engagements
Contribute to the FDE security accelerator library: reusable modules, templates, and reference configurations that help FDE engineers build secure AI systems faster
Requires up to 25% travel

A day in the life

You start the morning running your automated security scan against a new Bedrock-powered application an FDE pod shipped overnight, triaging the findings and filing issues for two real vulnerabilities. Mid-morning you pair with an FDE engineer to fix an IAM policy that's overly permissive for their multi-agent orchestration system. After lunch you're writing a Python script that automates guardrail bypass testing for the team's standard deployment pattern.

You close out the day joining a threat modeling session led by a senior security engineer, where you learn how to assess data flow risks in a customer's RAG pipeline. Every week you're working on a different AI architecture, building skills you can't get anywhere else.

10047

2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
Bachelor's degree in computer science or equivalent
2+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
2+ years of work in identifying security issues and risks, and developing mitigation plans experience
2+ years hands on building AI/agentic systems
Experience with security in service-oriented architectures/microservices and web services
US government security clearance of top secret or above
Experience with compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST
Experience with AWS technologies
Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave.

Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, TX, Dallas – 159,300.00 - 202,400.00 USD annually

Security Engineer, Forward Deployed Engineering, AWS Forward Deployed Engineering

The role

Security Engineer, Forward Deployed Engineering, AWS Forward Deployed Engineering

The role

The team

What you will do

Inclusive Team Culture

Mentorship and Career Growth

10047

About Amazon.com Services LLC

Similar jobs at other companies

Forward Deployed Security Engineer

Forward Deployed Engineer (FDE), Cyber - SF

Staff Security Engineer

Forward Deployed Engineer (FDE), Cyber - NYC

Senior Application Security Engineer

Principal Technical Consultant – Forward Deployed Engineer, AI Security

Amazon.com Services LLC