
Sr Security Engineer, Supply Chain, Leo Security
Required skills
- Leo Security
- Systems Security Engineer
- supply chain security
- contract manufacturers
- component vendors
- service providers
- hardware
- assessment capability
- onsite cybersecurity
- physical security assessments
Nice to have
- third-party risk assessment
- vendor security evaluation
- industrial facilities
- access controls
- camera systems
- visitor management
Role summary
Amazon Leo is seeking a Systems Security Engineer to join the Leo Infrastructure and IP Security team. This role focuses on protecting the supply chain, including contract manufacturers, component vendors, and service providers, for a Low Earth Orbit satellite constellation. Responsibilities include conducting onsite cybersecurity and physical security assessments, performing threat modeling for manufacturing and OT environments, and developing AI-assisted tooling to enhance efficiency. The engineer will contribute to maturing the supply chain security program, implementing network security mitigations, and embedding security requirements into supplier contracts. This is an opportunity to defend space-grade hardware and shape a security program from its early stages.
Key job responsibilities
- Conduct threat modeling for supply chain and manufacturing environments, including OT/ICS and AI-integrated topologies, and translate identified risks into findings with clear severity ratings and remediation guidance.
- Plan and lead onsite security assessments at supplier and contract manufacturer facilities, evaluating cybersecurity controls, physical security posture, and operational practices against {NAME}'s supplier security requirements.
- Contribute to maturing the supply chain security program by refining assessment methodology, scoring criteria, standards, and operational processes as the supplier portfolio expands.
- Develop AI-assisted tooling to automate evidence collection, finding triage, and report generation, improving the efficiency and consistency of the assessment workflow.
- Partner with infrastructure, site operations, procurement, and hardware engineering teams to implement network security mitigations and ensure security requirements are embedded in supplier contracts.
A day in the life
You might spend a morning onsite at a contract manufacturer, walking the production floor with the site security team to evaluate physical access controls, camera coverage, and secure storage areas. That afternoon you review the supplier's network architecture, identifying where sensitive data crosses trust boundaries and whether segmentation meets the bar. Between assessments, you refine scoring rubrics, build automation to streamline report generation, and collaborate with procurement to land security requirements in new supplier contracts.
About the team
Leo Infrastructure and IP Security protects the people, facilities, hardware, and supply chain behind a global satellite constellation. The supply chain security function manages assessment and risk reduction for Leo's critical suppliers. You will work alongside security engineers covering network and physical security domains, software engineers building risk management tooling, and applied scientists modeling supply chain telemetry. The team is expanding to keep pace with the constellation's growth, making this an opportunity to shape processes and standards from the ground up at an interstellar scope. Basic Qualifications: - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
- 5+ years of experience in security engineering, security assessments, or security operations (non-internship)
- Experience conducting security assessments or audits — including evaluating cybersecurity and physical security controls.
- Knowledge of security frameworks and standards (e.g., NIST 800-53, NIST 800-161, ISO 27001, NIST 800-171, or equivalent)
- Ability to document findings, develop risk ratings, and communicate complex security concepts to both technical and non-technical audiences Preferred Qualifications: - Experience with supply chain risk management (SCRM) programs, third-party risk assessment, or vendor security evaluation
- Experience conducting physical security assessments at manufacturing or industrial facilities (access controls, camera systems, visitor management, secure storage, environmental controls)
- Experience assessing cybersecurity controls in manufacturing, hardware, or operational technology environments
- Familiarity with supply chain security regulations and frameworks (NIST 800-161, NISTIR 8276, FAR/DFARS, CMMC, ITAR/EAR)
- Experience working with or assessing suppliers in regulated industries (electronics manufacturing, contract manufacturing, or hardware supply chain)
- Willingness to travel to supplier sites (domestic and international)
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually
USA, VA, Herndon - 178,400.00 - 226,700.00 USD annually
USA, WA, Bellevue - 178,400.00 - 226,700.00 USD annually
USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually
Similar roles
Chief of Staff & Business Operations Lead, Global Network DeliveryAmazon · Seattle, WA · Onsite
Principal, AWS Office of the CISO, AWS SecurityAmazon · Seattle, WA · Onsite
Sr II - Embedded Product Security Engineer (US, Remote)Arthrex · Remote · Remote- Cloud Security Engineer - part-time (R-00250)True Zero Technologies · Remote · Remote
Senior Security EngineerRain · New York, NY · Onsite- Senior Security Engineer, Infrastructure SecurityClickUp · Remote · Remote
