Security Engineer, Forward Deployed Engineering

Amazon’s Forward Deployed Engineering (FDE) embeds engineers directly with strategic enterprise customers to help build production AI systems in customer environments. In this Security Engineer role, you’ll support FDE teams by strengthening security for AI/ML deployments, improving guardrails and automation, and enabling faster, safer launches. The culture is people-first, anti-burnout, bold, and engineering-excellence-driven, with security positioned as the function that makes production possible.

Location: Dallas, TX (onsite)  |  Travel: up to 25%  |  Compensation: USD 159,300 - 202,400 per yearly

What you’ll do

• Conduct security design reviews, code reviews, and architecture assessments for production AI systems including agentic workflows, RAG pipelines, orchestration layers, and model integrations, under guidance from senior security engineers
• Run threat modeling and penetration testing for AI/ML applications deployed in customer environments, identify vulnerabilities, and coordinate with FDE engineers to implement fixes prior to production release
• Build and maintain security automation such as scanning tools, CI/CD security gates, guardrail testing scripts, secrets detection, and dependency vulnerability checks for forward-deployed AI systems
• Implement controls for AI-specific threats, including prompt injection prevention, output filtering, data isolation, model API endpoint hardening, and guardrail configuration
• Support security incident response for FDE-delivered production AI systems by assisting with triage, root cause analysis, and remediation under senior engineer guidance
• Document security findings and remediation guidance as reusable playbooks and runbooks for future FDE engagements
• Contribute to the FDE security accelerator library with reusable modules, templates, and reference configurations that help FDE engineers build secure AI systems faster

Required qualifications

• 2+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security (non-internship)
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
• Bachelor’s degree in computer science or equivalent
• 2+ years of (non-internship) scripting, programming, and security code review in common programming languages
• 2+ years identifying security issues and risks and developing mitigation plans
• 2+ years hands on building AI/agentic systems
• US Citizen

Preferred qualifications

• Experience with security in service-oriented architectures/microservices and web services
• US government security clearance of top secret or above
• Experience with compliance and security standards including PCI DSS, ISO 27001, HIPAA, and NIST
• Experience with AWS technologies
• Knowledge of at least two of: Scala, Java, Python, C/C++, Go

Technologies

Python, CI/CD, Bedrock, IAM, RAG, AI/ML, agentic workflows

Benefits

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D, option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments and restricted stock units (RSUs)

A day in the life

• Run an automated security scan against a new Bedrock-powered application shipped overnight by an FDE pod, triage findings, and file issues for vulnerabilities
• Pair with an FDE engineer to address IAM policy permissions for a multi-agent orchestration system
• Write a Python script to automate guardrail bypass testing for a standard deployment pattern
• Join a threat modeling session led by a senior security engineer to assess data flow risks in a customer RAG pipeline

About the team: FDE embeds AI engineers inside strategic enterprise customers to build production AI systems. AWS invested $1B in this initiative. Security is described as the enabling function for production readiness.