Sr. Security Engineer, Leo Security

We are open to hiring candidates to work out of one of the following locations:

Redmond, WA, USA

Leo is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world.

Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and to protect the integrity and confidentiality of our customer data. Our team drives the research & development, deployment and operation of several mission-critical security systems and mechanisms.

You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization.

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Key job responsibilities

You and your team own the vulnerability management program for Leo systems across a large and heterogeneous fleet. The discovery, prioritization, and remediation actions themselves run on Amazon-wide mechanisms; your responsibility is to make sure those mechanisms actually work for Leo's unique fleet requirements, that coverage and risk-based prioritization hold up against how our systems are really built, and that gaps get closed.

You will drive resolution of the high-severity and systemic vulnerabilities that matter most by coordinating across the teams that own them, and you will lead the burn down of long-term technical debt and risk so the fleet gets measurably safer over time.

You will be a guardian for security simplicity. Leo's builders should inherit security at scale in ways that are easy to consume and that do not pile on untold burden or distract from shipping a game-changing satellite internet service, and it is your job to make sure that promise holds. You will collect feedback from the builders living with these mechanisms, detect where security is becoming friction instead of a default, and push to simplify it, so that doing the secure thing stays the path of least resistance rather than a tax on building.

You will partner with builder teams and their leaders as a trusted advisor, helping them understand their risk, define security priorities, and secure their systems without slowing their delivery. You will assess technical debt and risk alongside them, provide strategic direction that addresses vulnerabilities and fortifies our products, help leaders measure their organization's security execution, and guide teams toward outcomes that produce products which safely handle customer data.

Beyond any single engagement, you will instill a security culture that makes secure practices a default rather than an afterthought, and you will mentor builders who aspire to become security advocates and security engineers through 1-1 sessions and office hours, growing the next generation of security talent across the organization.

You will translate compliance and regulatory requirements into concrete, auditable engineering controls and evidence, keeping Leo continuously audit-ready rather than scrambling before each review. You will define and report the metrics that show whether the program is working, including coverage, time-to-remediate, SLA adherence, and residual risk, and you will use that data to drive decisions.

In this highly dynamic role, you will join a team that is collectively accountable for where our security investments deliver the most value and most simplify security for Leo's builders. Together you will decide where to focus, challenge each other's priorities, and share the hard problems rather than carry them alone. No two days look the same, and the judgment the team brings to where it spends its attention is at the heart of the job.

Teams will reach out for ideas on how to handle a wide variety of security problems, and you will be the person they trust to point them at the right answer. You can anticipate implementation questions like "What is the paved path for vulnerability management?", "This finding is flagged on my service but I…