# Silicon Development Infrastructure Security, Annapurna ML at Amazon

Amazon is hiring a Silicon Development Infrastructure Security, Annapurna ML in Austin, United States. It pays $178k-$227k a year and Level rates it Little AI ●○○○; you can [apply on Amazon](https://jobsbylevel.com/go/9e535e2c-7ab1-435a-978a-ac93ceca22b0?utm_medium=ai-agent).

AI Level 1, AI centrality 30 out of 100. US, TX, Austin.

## Details

- Company: [Amazon](https://jobsbylevel.com/companies/amazon)
- AI level: AI Level 1 (score 30 out of 100)
- Location: US, TX, Austin
- Salary: $178k-$227k
- Posted: November 11, 2026
- Apply: https://jobsbylevel.com/go/9e535e2c-7ab1-435a-978a-ac93ceca22b0?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=silicon-development-infrastructure-security-annapurna-ml-at-amazon-473652

## Description

We're looking for a Security Engineer to own the security posture of the cloud and hybrid infrastructure that powers silicon development at Annapurna Labs. You'll be a single-threaded security partner embedded in the ML Infrastructure team, working directly alongside software development engineers, system development engineers, and chip methodology engineers to keep the infrastructure that hundreds of chip designers depend on secure, compliant, and hardened against emerging threats. This is a high-ownership role where you'll operate across the full security lifecycle: triaging and driving critical findings to resolution, building automated scanning and patching mechanisms, designing secure network architectures for vendor and partner onboarding, and turning repeated fixes into reusable automation and runbooks. You'll make security a seamless part of how the team builds and ships, not a gate that slows them down. Key job responsibilities • Vulnerability management — Own the security findings backlog end to end. Triage findings from security scanners and assessments (CVE/CVSS scoring, container and host scanning such as AWS Inspector), coordinate remediation with the engineering SMEs who own the affected systems, mitigate high-severity issues within agreed timelines, and drive measurable reduction of long-standing findings. • Patching Automation — Keep server fleets (RHEL/Rocky Linux, Amazon Linux, and Windows Server, cloud and on-premises) current on critical security updates. Own and improve patching pipelines using dnf/yum, AWS Systems Manager Patch Manager, and golden-AMI pipelines, including emergency vendor patches on production systems. Establish a regular patching cadence and structurally eliminate recurring patch-drift findings. • Vendor and partner onboarding — Run third-party security assessments for new technology partners and design isolated partner environments with least-privilege network and data access. Implement VPC segmentation, security groups and NACLs, Transit Gateway, AWS PrivateLink, client VPN, S3 bucket policies, and KMS encryption to enforce strict boundary controls. • Identity and access — Design and audit access controls across multiple cloud accounts. Cover AWS IAM roles and policies, SCPs, IAM Identity Center, Active Directory and LDAP, Linux directory integration (SSSD, Winbind, PAM, Kerberos), sudoers, SSH key and certificate management, bastion hosts, and VPN. Fix privilege-escalation paths and unauthenticated endpoints (OIDC/SAML, Amazon Cognito, ALB authentication). • Security automation — Build tools, dashboards, alerting, and AI-assisted agents that detect, explain, and fix security issues using Python, Bash, AWS Lambda, EventBridge, CloudWatch, CloudTrail, GuardDuty, Security Hub, and Amazon Bedrock. Turn repeated fixes into runbooks and reusable automation using infrastructure as code (AWS CDK, CloudFormation, Terraform, Ansible). • Threat modeling and design review — Review new infrastructure designs for security exposure using STRIDE and data-flow diagrams. Assess network ingress and egress, secrets handling (AWS Secrets Manager, KMS), TLS and certificate management, and logging coverage. Establish secure-by-default patterns that the broader team can adopt. • Reporting — Produce clear weekly security status updates with metrics: finding counts by severity, SLA adherence, backlog trajectory, and workstream status. A day in the life Each day you will work with some of the best engineers in the industry to develop Machine Learning Accelerators. On-site in Austin, Texas, you will be part of the team that develops custom silicon and contribute to the security of the infrastructure that enables this innovation. You might start your day triaging new vulnerability findings from overnight scans, assessing severity scores, and coordinating with the engineering SMEs who own the affected systems. You could spend your morning reviewing a vendor security assessment for a new technology partner,

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/silicon-development-infrastructure-security-annapurna-ml-at-amazon-473652

Source: https://jobsbylevel.com/jobs/silicon-development-infrastructure-security-annapurna-ml-at-amazon-473652

## Cite this page

Level. https://jobsbylevel.com/jobs/silicon-development-infrastructure-security-annapurna-ml-at-amazon-473652.

Get job alerts: https://jobsbylevel.com/newsletter