Security Engineer, AWS Forward Deployed Engineering

About the role

AWS Forward Deployed Engineering embeds AI engineers directly inside strategic enterprise customers to design, build and deploy production-grade AI systems. It is looking for a Security Engineer to join its security team and help secure production AI systems deployed in customer environments. The role is hands-on: most of the time is spent writing code, reviewing architectures and testing systems, with senior security engineers mentoring you while you own real security deliverables from your first engagement.

Key responsibilities

• Conduct security design, code and architecture reviews for production AI systems such as agentic workflows, RAG pipelines, orchestration layers and model integrations
• Perform threat modeling and penetration testing, identify vulnerabilities and work with FDE engineers to fix them before release
• Build and maintain security automation: scanning tools, CI/CD security gates, guardrail testing scripts, secrets detection and dependency checks
• Implement controls for AI-specific threats: prompt injection prevention, output filtering, data isolation, model API hardening and guardrail configuration
• Support security incident response, triage, root cause analysis and remediation
• Document findings and remediation guidance as playbooks and runbooks, and contribute to the security accelerator library

Required profile

• Bachelor's degree in computer science or equivalent
• 2+ years of threat modeling, secure coding, identity management, software development, cryptography, system administration and network security experience
• 2+ years of troubleshooting, log analysis and automation with command-line tools
• 2+ years of scripting, programming and security code review in common languages
• 2+ years of identifying security risks and developing mitigation plans
• 2+ years of hands-on building of AI/agentic systems

Required skills

• Preferred: security in microservices and web services, and standards such as PCI DSS, ISO 27001, HIPAA and NIST
• Preferred: AWS products and services
• Preferred: knowledge of at least two of Scala, Java, Python, C/C++ or Go

The role requires up to 25% travel.