Senior Security Engineer, Annapurna Labs

About AWS Utility Computing

AWS Utility Computing (UC) drives product innovations, from foundational services such as Amazon S3 and Amazon EC2, to consistently released new features that distinguish AWS in the industry. As part of the UC organization, you'll support the development and management of Compute, Database, Storage, Internet of Things (IoT), Platform, and Productivity Apps services across AWS. Within AWS UC, Amazon Dedicated Cloud (ADC) roles engage with customers requiring specialized security solutions for their cloud services.

About Annapurna Labs

Annapurna Labs is looking for a Senior Security Engineer to help ensure that our hardware platforms, software deliverables, and devices are secured against the latest threats.

Key Job Responsibilities

• Responsible for the security assurance of our products, influencing and scrutinizing design and implementation.
• Develop elaborate threat models, suggesting and reviewing effective solutions and mitigations.
• Lead vulnerability research, penetration testing, automated penetration testing solutions, and methodologies such as fuzzing and static analysis.
• Mentor service teams in adding security testing tools and practices to their development processes.
• Serve as a technical leader within the Annapurna security team, providing advice on technical and business issues.
• Manage time efficiently and deliver results effectively, even in the face of uncertainty.
• Proactively share knowledge across the Amazon community and become a key company resource in core security areas.
• Lead security reviews of large Amazon projects, setting standards and defining best practices for AWS Security teams.
• Exercise exemplary judgment in making technical trade-offs between short-term versus long-term security and business goals.
• Demonstrate resilience and navigate difficult situations with composure and tact.
• Maintain a broad understanding of the AWS business and its interconnections.
• Provide training, advice, and mentorship to other engineers throughout AWS.

Basic Qualifications

• 5+ years of low-level systems security research and vulnerability testing experience.
• Experience developing security tools (fuzzers, scanners, analysis frameworks).
• Security architecture design and threat modeling experience.
• Proficiency in C and experience with Python.
• Deep knowledge of security aspects of ARM/x86 processor architectures.
• Strong understanding of hardware security (secure boot, cryptographic implementations, side-channel attacks).
• Knowledge of security protocols and cryptographic primitives.
• Technical English proficiency.

Preferred Qualifications

• Background in firmware reverse engineering and vulnerability research.
• Experience with fuzzing frameworks (AFL++, libFuzzer, Syzkaller).
• Knowledge of virtualization security or hypervisor technologies.
• Familiarity with AWS services.
• Technical leadership, mentoring, and cross-functional collaboration.
• Security publications (research, CVEs).
• CTF, bug bounty, or competitive security research background.

Key skills/competency

• Low-level security
• Vulnerability research
• Penetration testing
• Threat modeling
• Security architecture
• Hardware security
• C/Python programming
• ARM/x86 architecture
• Cryptography
• Fuzzing