Software Development Engineer, Abuse Prevention, Devices and Services Security

We are open to hiring candidates to work out of one of the following locations:

Austin, TX, USA
Sunnyvale, CA, USA

Since its beginning, Amazon Devices has revolutionized consumer electronics with products like the Kindle, Fire tablets, Fire TV, and Amazon Echo. We continue to push the boundaries of innovation, creating devices that enhance connectivity, simplify everyday life, and elevate the user experience. What will you help us create next?

The Senior Embedded Linux Engineer (Senior Software Development Engineer) will provide technical leadership and contribute to the definition, development, integration, test, documentation and support of platform software. This hands-on position requires broad engineering competence and in-depth technical knowledge of embedded software development, Linux development, ARM architecture, device security, as well as demonstrated experience successfully planning, organizing and conducting software development projects in a dynamic environment. You will be expected to work at all levels of the stack from the application UI to the kernel, nothing is off limits. Members of this team tend to have a high degree of fluency in more than one language and tools and work with an unwavering focus on device operating system's security and privacy.

Are you passionate about security and eager to make a real impact? Join us as a Software Development Engineer and play a critical role in safeguarding millions of Amazon customers and their favorite devices, including Echo, Fire TV, Tablets, and more.


Key job responsibilities
As a Senior Embedded Linux Engineer (Senior Software Development Engineer), you will engage with an experienced cross-disciplinary staff to conceive and design innovative consumer products. You must be responsive, flexible and able to succeed within an open collaborative peer environment. The team is responsible for delivering and maintaining software and platforms that are high-performance, low-power, stable and meet the highest security standards. You will:

- Own the software design, documentation, development, engineering approach, delivery and support of DeviceOS security and privacy.
- Be responsible for the architecture and design of software solutions, especially in the area of device security & privacy, determining current limitations and compatibilities between subsystems, selecting new concepts and methodologies, and developing key routines and utilities.
- Dive deep into a difficult problem, identify the root cause, and provide an appropriate solution.
- Specify and develop security detection mechanisms in our low-level device software (e.g., Trusted Execution Environment, Trusted Applications)
- Contribute to projects that develop new intellectual property
- Collaborate cross-functionally with hardware, firmware, and platform teams
- Leverage AI to automate development, testing and accelerate delivery
- Thrive in a fast-paced Agile environment

A day in the life
We are a builder team dedicated to developing tools and mechanisms to detect device abuse in the field, and apply mitigations when detected. We work with multiple device product teams and security teams to strengthen device security.

About the team
Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

BASIC QUALIFICATIONS

- Bachelor's degree in Computer Science, Engineering, Mathematics, or a related field, or 5+ years of embedded firmware development experience
- Experience in embedded development in C/C++
- 1+ years of Android development experience
- 1+ years of experience in hardware or platform security (secure boot, TEE, cryptographic implementations)
- Experience with reverse engineering tools and techniques (e.g., IDA Pro, Ghidra, JTAG debugging)

PREFERRED QUALIFICATIONS

- Master's degree or above in computer science or equivalent
- Experience developing within Trusted Execution Environments (e.g., ARM TrustZone, OP-TEE, Trusty, QSEE)
- Knowledge of secure communication between TEE and REE, inter-processor communication, or secure channel protocols
- Experience with embedded operating systems (Linux kernel, RTOS) and hardware design
- Knowledge of hardware security mechanisms: secure boot, hardware root of trust, attestation
- Experience with threat modeling and security architecture review of embedded systems
- Experience with offensive security techniques: penetration testing, exploit development, and vulnerability research
- Knowledge of cryptographic protocols and their implementation in constrained environments
- Experience with scripting languages (Python, Bash) for automation and tooling
- Knowledge of side-channel attacks and fault injection techniques
- 2+ years delivering commercial embedded software or security-focused services

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers.