Amazon
Security Engineer, Forward Deployed Engineering, AWS Forward Deployed Engineering
$159K–$213K
Boston, MA +5 · Full-time · Posted Sep 3, 2026
- Location
- Boston, MA
Seattle, WA
Arlington, VA
New York, NY
Mountain View, CA
Dallas, TX - Experience
- 2+ years in each of the areas specified in the basic qualifications.
- Education
- Bachelor's degree in computer science or equivalent.
- Visa sponsorship
- Candidate selected must be a US Citizen.
About the job
Secures production AI systems deployed in enterprise customer environments through security reviews, testing, automation, and implementation of AI-specific controls.
What you'll do
- Review AI system designs, code, and architectures; perform threat modeling and penetration testing.
- Build security automation and implement controls for AI-specific threats.
- Support incident response and create reusable security playbooks, runbooks, and accelerator components.
What they ask for
- 2+ years across threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
- 2+ years troubleshooting systems, analyzing logs, or automating tasks with command line tools (non-internship).
- Bachelor's degree in computer science or equivalent; 2+ years of (non-internship) scripting, programming, and security code review experience.
- 2+ years identifying security risks and developing mitigations; 2+ years hands-on building AI/agentic systems.
Nice to have
- Experience with service-oriented architectures/microservices, web services, compliance standards, or AWS technologies.
- Top secret or above US government security clearance; knowledge of at least two of Scala, Java, Python, C/C++, or Go.
Pay
166,600.00 - 212,800.00 USD annually (base salary); 159,300.00 - 202,400.00 USD annually (base salary); 159,300.00 - 212,800.00 USD annually (base salary)
Tools
AWS, Bedrock, Python, Scala, Java, C/C++, Go, IAM
AI focus
Security engineering for production AI/agentic systems, including RAG pipelines, prompt injection prevention, output filtering, data isolation, model endpoint hardening, and guardrail testing.
Model-written summary · the original posting is authoritative