Drimva

Amazon

Security Engineer, Forward Deployed Engineering, AWS Forward Deployed Engineering

$159K–$213K

Boston, MA +5 · Full-time · Posted Sep 3, 2026

Location
Boston, MA
Seattle, WA
Arlington, VA
New York, NY
Mountain View, CA
Dallas, TX
Experience
2+ years in each of the areas specified in the basic qualifications.
Education
Bachelor's degree in computer science or equivalent.
Visa sponsorship
Candidate selected must be a US Citizen.

About the job

Secures production AI systems deployed in enterprise customer environments through security reviews, testing, automation, and implementation of AI-specific controls.

What you'll do

  • Review AI system designs, code, and architectures; perform threat modeling and penetration testing.
  • Build security automation and implement controls for AI-specific threats.
  • Support incident response and create reusable security playbooks, runbooks, and accelerator components.

What they ask for

  • 2+ years across threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
  • 2+ years troubleshooting systems, analyzing logs, or automating tasks with command line tools (non-internship).
  • Bachelor's degree in computer science or equivalent; 2+ years of (non-internship) scripting, programming, and security code review experience.
  • 2+ years identifying security risks and developing mitigations; 2+ years hands-on building AI/agentic systems.

Nice to have

  • Experience with service-oriented architectures/microservices, web services, compliance standards, or AWS technologies.
  • Top secret or above US government security clearance; knowledge of at least two of Scala, Java, Python, C/C++, or Go.

Pay

166,600.00 - 212,800.00 USD annually (base salary); 159,300.00 - 202,400.00 USD annually (base salary); 159,300.00 - 212,800.00 USD annually (base salary)

Tools

AWS, Bedrock, Python, Scala, Java, C/C++, Go, IAM

AI focus

Security engineering for production AI/agentic systems, including RAG pipelines, prompt injection prevention, output filtering, data isolation, model endpoint hardening, and guardrail testing.

Model-written summary · the original posting is authoritative

First seen Oct 15, 2026 · Last verified Nov 4, 2026 (UTC)