Sr Security Engineer, Network, Leo Security
Amazon · Arlington, Virginia, USA ·
- Seniority
- Senior
- Employment
- Full time
- Category
- Security
- Visa sponsorship
- No
- Company size
- 1000+
Senior Security Engineer owning network security across Amazon Leo's satellite constellation environments — corporate IT, manufacturing OT/SCADA, lab, launch ops, and global ground stations — focusing on threat modeling, detection engineering, incident response, and network security assessments.
Amazon Leo is a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world. We are looking for a senior security engineer to join the Leo Infrastructure and IP Security team. The team defends the manufacturing lines, launch sites, and global ground infrastructure behind the constellation from the most sophisticated threat actors on the planet. You will own network security across Leo's heterogeneous environments — corporate IT, manufacturing OT/SCADA, lab, launch operations, and global ground stations — defining the security bar for every network deployment and driving detection coverage from concept to production.
Export Control Requirement
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.
Key job responsibilities
A Security Engineer in Amazon will be strong in multiple security domains and sought out for advice on technical issues. You will be on a team of security engineers focusing on the security of Leo's networks.
Analyze and deploy detections to production networks, leveraging automation and tooling to identify vulnerabilities and surface security events.
Conduct threat modeling for network deployments across environments and locations, including OT/ICS topologies.
Build and maintain a network security assessment framework that holds each deployment type — including OT/SCADA environments — to a consistent bar.
Translate network and OT/ICS security risks into findings with clear severity and business impact; communicate them to security leadership and drive mitigations.
Develop and maintain security documentation: network security standards, assessment runbooks, and detection coverage maps.
Partner with infrastructure and site operations teams to implement network security mitigations and hardening measures.
Contribute to incident response when network-based threats are detected, including containment, investigation, and post-incident improvement.
A day in the life
One morning you might be reviewing a network architecture proposal for a new ground station deployment, defining the segmentation and monitoring requirements before the first switch is racked. That afternoon, a detection fires on anomalous lateral movement in a manufacturing network — you triage it, determine whether it's a misconfigured industrial controller or something worse, and drive the response. The next day you could be leading a threat model for a new OT protocol integration at a launch site. When you're not responding to active events, you will be evaluating Leo's network security posture end-to-end: identifying architectural weaknesses, proposing new detection initiatives, and driving cross-team programs that raise the bar across every site type.
You will have the freedom to prioritize as needed to balance your personal life, professional growth, and the delivery of your assigned projects.
About the team
Leo Infrastructure and IP Security protects the people, facilities, hardware, and supply chain behind a global satellite constellation. The network security function within this team owns detection, assessment, and hardening of Leo's IT and OT networks across lab, manufacturing, launch, and ground station environments. The team works with automation and tooling to move from reactive triage to proactive detection coverage and continuous posture measurement. You will work alongside security engineers, software engineers, and applied scientists who are building the platforms these capabilities run on.
Inclusive Team Culture
In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.
Export Control Requirement
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.
Key job responsibilities
A Security Engineer in Amazon will be strong in multiple security domains and sought out for advice on technical issues. You will be on a team of security engineers focusing on the security of Leo's networks.
Analyze and deploy detections to production networks, leveraging automation and tooling to identify vulnerabilities and surface security events.
Conduct threat modeling for network deployments across environments and locations, including OT/ICS topologies.
Build and maintain a network security assessment framework that holds each deployment type — including OT/SCADA environments — to a consistent bar.
Translate network and OT/ICS security risks into findings with clear severity and business impact; communicate them to security leadership and drive mitigations.
Develop and maintain security documentation: network security standards, assessment runbooks, and detection coverage maps.
Partner with infrastructure and site operations teams to implement network security mitigations and hardening measures.
Contribute to incident response when network-based threats are detected, including containment, investigation, and post-incident improvement.
A day in the life
One morning you might be reviewing a network architecture proposal for a new ground station deployment, defining the segmentation and monitoring requirements before the first switch is racked. That afternoon, a detection fires on anomalous lateral movement in a manufacturing network — you triage it, determine whether it's a misconfigured industrial controller or something worse, and drive the response. The next day you could be leading a threat model for a new OT protocol integration at a launch site. When you're not responding to active events, you will be evaluating Leo's network security posture end-to-end: identifying architectural weaknesses, proposing new detection initiatives, and driving cross-team programs that raise the bar across every site type.
You will have the freedom to prioritize as needed to balance your personal life, professional growth, and the delivery of your assigned projects.
About the team
Leo Infrastructure and IP Security protects the people, facilities, hardware, and supply chain behind a global satellite constellation. The network security function within this team owns detection, assessment, and hardening of Leo's IT and OT networks across lab, manufacturing, launch, and ground station environments. The team works with automation and tooling to move from reactive triage to proactive detection coverage and continuous posture measurement. You will work alongside security engineers, software engineers, and applied scientists who are building the platforms these capabilities run on.
Inclusive Team Culture
In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.