Security Engineer, Services Cryptography

Job Description

Job Title: Security Engineer, Specialized Business Services Cryptography. Location: Sunnyvale, CA, USA / Seattle, WA, USA / New York, NY, USA / Herndon, VA, USA

Responsibilities:

• Gather and analyze business and functional requirements.
• Translate business requirements into technical cryptographic designs.
• Design, analyze, review, and implement cryptographic solutions for devices and cloud services.
• Collaborate closely with software development engineers to implement secure cryptographic systems.
• Ensure developed code is high quality, maintainable, testable, and efficient.
• Lead technical problem solving and establish engineering best practices;
• Track, analyze, and report key performance metrics and security indicators.
• Serve as a technical cryptography expert for development teams across Amazon's Specialized Businesses organization.
• Support the full software development lifecycle for cryptography-related projects.
• Work within an agile development environment.
• Research emerging cryptographic standards, protocols, and algorithms.
• Contribute to cryptography training programs, guidance documents, and security best practices.
• Participate in security design reviews and architecture discussions;
• Support development of advanced cryptographic technologies including post-quantum cryptography, homomorphic encryption, lightweight cryptography, and secure communication protocols.

Qualifications:

• Bachelor's degree in Science, Technology, Engineering, Mathematics (STEM), or equivalent security experience.
• 3+ years of professional experience in scripting, programming, and security code review.
• 3+ years of experience developing cryptographic solutions.
• 3+ years of experience designing, architecting, and implementing systems utilizing:
  • Cryptographic algorithms
  • Public Key Infrastructure (PKI)
  • Hardware Security Modules (HSMs)
• 3+ years of experience performing threat modeling for cryptographic systems.

Preferred:

• 2+ years of experience in one or more of the following:
  • Threat modeling
  • Secure coding
  • Identity management and authentication
  • Software development
  • Cryptography
  • System administration
  • Network security
• Experience with AWS products and services.
• 3+ years of experience across the full software development lifecycle, including:
  • Coding standards
  • Code reviews
  • Source control management
  • Build processes
  • Testing
  • Operations
• Master's degree in Computer Science or a related discipline.
• Familiarity with post-quantum cryptographic algorithms.
• Knowledge of public-key cryptography.
• Experience developing security protocols from public standards or academic research.

Benefits and Compensation:

Salary Range:

Sunnyvale, California: $166,600 - $212,800 annually

New York, New York: $159,300 - $212,800 annually

Herndon, Virginia: $159,300 - $202,400 annually

Seattle, Washington: $159,300 - $202,400 annually

Additional Compensation:

• Sign-on bonuses
• Restricted Stock Units (RSUs)

Benefits:

• Medical, dental, and vision insurance
• Prescription drug coverage
• Life and AD&D insurance
• Employee Assistance Program (EAP)
• Mental health support
• Flexible Spending Accounts (FSA)
• Adoption and surrogacy reimbursement
• 401(k) matching
• Paid time off
• Paid parental leave
• Flexible work-life balance programs
• Training and career development opportunities

Other Information:

• Team focuses on cryptographic technologies including post-quantum cryptography, homomorphic encryption, lightweight cryptography, and security protocols.
• Amazon encourages candidates from diverse professional backgrounds to apply, even if they do not meet every qualification listed.
• Workplace accommodations are available throughout the hiring process;
• Amazon is an equal opportunity employer and considers qualified applicants regardless of protected status.
• Position is part of the Systems, Quality, & Security Engineering organization.