Sr Security Engineer, Supply Chain, Leo Security

Amazon is hiring a Sr Security Engineer, Supply Chain, Leo Security in Arlington, United States. It pays $178k-$227k a year and Level rates it ; you can apply on Amazon.

Level's read on this job

Works on AI ●●●○ is how Level rates this cybersecurity role: the daily work is on AI products, without building the model.
Pay on this posting starts 12% higher than the typical cybersecurity posting on Level.
The posting mentions AWS, supply chain security and threat modeling among its tools and skills.
Level classes it as a senior role.
Amazon has 20,000+ other open roles on Level.

AI in this role

Conduct security assessments and build AI-assisted tooling to protect satellite supply chain infrastructure.

AWS

supply-chain-securitythreat-modelingsecurity-assessmentsautomation

Amazon Leo is a constellation of Low Earth Orbit satellites delivering high-speed broadband connectivity to unserved and underserved communities worldwide. We are looking for a Systems Security Engineer to join the Leo Infrastructure and IP Security team, where you will work within the supply chain security program protecting the contract manufacturers, component vendors, and service providers who build and handle Leo hardware. As the constellation grows, so does the supplier portfolio — and this new role will help the team scale its assessment capability to match. You will conduct onsite cybersecurity and physical security assessments, perform threat modeling for manufacturing and operational technology (OT) environments, and build AI-assisted tooling that makes the program more efficient. If you want to defend space-grade hardware from sophisticated threat actors while shaping a security program from its early stages, we want to hear from you.

Key job responsibilities
- Conduct threat modeling for supply chain and manufacturing environments, including OT/ICS and AI-integrated topologies, and translate identified risks into findings with clear severity ratings and remediation guidance.
- Plan and lead onsite security assessments at supplier and contract manufacturer facilities, evaluating cybersecurity controls, physical security posture, and operational practices against {NAME}'s supplier security requirements.
- Contribute to maturing the supply chain security program by refining assessment methodology, scoring criteria, standards, and operational processes as the supplier portfolio expands.
- Develop AI-assisted tooling to automate evidence collection, finding triage, and report generation, improving the efficiency and consistency of the assessment workflow.
- Partner with infrastructure, site operations, procurement, and hardware engineering teams to implement network security mitigations and ensure security requirements are embedded in supplier contracts.

A day in the life
You might spend a morning onsite at a contract manufacturer, walking the production floor with the site security team to evaluate physical access controls, camera coverage, and secure storage areas. That afternoon you review the supplier's network architecture, identifying where sensitive data crosses trust boundaries and whether segmentation meets the bar. Between assessments, you refine scoring rubrics, build automation to streamline report generation, and collaborate with procurement to land security requirements in new supplier contracts.

About the team
Leo Infrastructure and IP Security protects the people, facilities, hardware, and supply chain behind a global satellite constellation. The supply chain security function manages assessment and risk reduction for Leo's critical suppliers. You will work alongside security engineers covering network and physical security domains, software engineers building risk management tooling, and applied scientists modeling supply chain telemetry. The team is expanding to keep pace with the constellation's growth, making this an opportunity to shape processes and standards from the ground up at an interstellar scope.

Basic qualifications

- 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
- 5+ years of experience in security engineering, security assessments, or security operations (non-internship)
- Experience conducting security assessments or audits — including evaluating cybersecurity and physical security controls.
- Knowledge of security frameworks and standards (e.g., NIST 800-53, NIST 800-161, ISO 27001, NIST 800-171, or equivalent)
- Ability to document findings, develop risk ratings, and communicate complex security concepts to both technical and non-technical audiences

Preferred qualifications

- Experience with supply chain risk management (SCRM) programs, third-party risk assessment, or vendor security evaluation
- Experience conducting physical security assessments at manufacturing or industrial facilities (access controls, camera systems, visitor management, secure storage, environmental controls)
- Experience assessing cybersecurity controls in manufacturing, hardware, or operational technology environments
- Familiarity with supply chain security regulations and frameworks (NIST 800-161, NISTIR 8276, FAR/DFARS, CMMC, ITAR/EAR)
- Experience working with or assessing suppliers in regulated industries (electronics manufacturing, contract manufacturing, or hardware supply chain)
- Willingness to travel to supplier sites (domestic and international)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually
USA, VA, Herndon - 178,400.00 - 226,700.00 USD annually

How we rate this

Sr Security Engineer, Supply Chain, Leo Security at Amazon rates 60 out of 100 for how much of the daily work is AI. That makes it Works on AI (AI Level 3 of 4). The level is about AI in the job, not seniority.

Classification

Works on AI. The daily work is on AI products, without building the model.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Sr Security Engineer, Supply Chain, Leo Security is an open job at Amazon.
Level rates this role AI Level 3 of 4: Works on AI.
The listed salary is $178k-$227k a year.
The role is based in US, VA, Arlington.
The job was posted on August 27, 2026.
Seniority: senior.
Applications are handled by Amazon. Apply on Amazon

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Supply Chain SecurityThreat ModelingSecurity AssessmentsAutomationAWS

Also common in cybersecurity jobs at this level

Python LLM AWS AI agents Google Cloud Kubernetes

Pay

This job starts at: $178k
Typical cybersecurity job: $160k

This posting starts 12% above the typical cybersecurity job. See cybersecurity jobs

Questions you could be asked

Tell me about a project where supply chain security was part of your work. What did you do?
Tell me about a project where threat modeling was part of your work. What did you do?
Tell me about a project where security assessments was part of your work. What did you do?
Tell me about a project where automation was part of your work. What did you do?
Walk me through how you've used AWS in your day-to-day work.

Adapt your resume

List these exact terms on your resume: Supply Chain Security, Threat Modeling, Security Assessments, Automation, and AWS. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Show where AI is part of your daily process, not a one-off project. This role expects it to be a running habit.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get a free CV review Check your resume with the ATS resume checker