Software Development Engineer , Abuse Prevention, Devices and Services Security

Software Development Engineer , Abuse Prevention, Devices and Services Security

Job :  |  Services LLC

Location:

Austin, TX, USA

Amazon Lab
126 is an inventive research and development company that designs and engineers high‑profile consumer electronics. Lab
126 began in 2004 as a subsidiary of , Inc., originally creating the best‑selling Kindle family of products. Since then, we have produced devices like Fire Tablet, Fire TV, Amazon Echo and Alexa. What will you help us create?

Are you passionate about security and eager to make a real impact? Join us as a Software Development Engineer and play a critical role in safeguarding millions of Amazon customers and their favorite devices, including Echo, Fire TV, Tablets, and more.

The Role:

Amazon Devices is looking for a Software Development Engineer to ensure that our devices are designed and implemented to the highest security standards, thus maintaining and enhancing customer trust. If you enjoy identifying and solving issues in hardware and low‑level software to improve the overall security of Amazon devices, this position will provide you with a unique opportunity to secure the next generation of consumer technology.

This is an opportunity to work on products used by millions of customers worldwide while collaborating with talented engineers in a fast‑paced, innovative environment. Every day, you will tackle complex security challenges using new technologies and make a meaningful impact on customer trust and safety.

If you thrive on solving problems, hold yourself to the highest engineering standards, and want to shape the future of device security, we would love to hear from you. Apply now and help us protect what matters most.

In this role, you will:

• Specify and develop security detection mechanisms in our low‑level device software (e.g., Trusted Execution Environment, Trusted Applications)
• Architect, design, implement, and evaluate security‑focused tools and services for device integrity
• Analyze the security posture of hardware (SoC, MCU) and low‑level OS components of consumer devices
• Identify vulnerabilities, develop mitigations, and validate solutions across the device stack
• Provide Tier 2 and Tier 3 security operations support, including incident handling and response
• Contribute to projects that develop new intellectual property
• Collaborate cross‑functionally with hardware, firmware, and platform teams
• Leverage AI to automate workflows and accelerate delivery
• Thrive in a fast‑paced Agile environment

We are a builder team dedicated to developing tools and mechanisms to detect device abuse in the field, and apply mitigations when detected. We work with multiple device product teams and security teams to strengthen device security.

• Bachelor's degree in Computer Science, Engineering, Mathematics, or a related field, or 5+ years of embedded firmware development experience
• Experience in embedded development in C/C++
• 1+ years of Android development experience
• 1+ years of experience in hardware or platform security (secure boot, TEE, cryptographic implementations)
• Experience with reverse engineering tools and techniques (e.g., IDA Pro, Ghidra, JTAG debugging)

• Master's degree or above in computer science or equivalent
• Experience developing within Trusted Execution Environments (e.g., ARM Trust Zone, OP-TEE, Trusty, QSEE)
• Knowledge of secure communication between TEE and REE, inter‑processor communication, or secure channel protocols
• Experience with embedded operating systems (Linux kernel, RTOS) and hardware design
• Knowledge of hardware security mechanisms: secure boot, hardware root of trust, attestation
• Experience with threat modeling and security architecture review of embedded systems
• Experience with offensive security techniques: penetration testing, exploit development, and vulnerability research
• Knowledge of cryptographic protocols and their implementation in constrained environments
• Experience with scripting languages (Python, Bash) for automation and tooling
• Knowledge of side‑channel attacks and fault injection techniques
• 2+ years delivering commercial embedded software or…