Senior Security Engineer, Forward Deployed Engineering, Forward Deployed Engineering
Posted Updated
AWS Forward Deployed Engineering (FDE) embeds AI engineers directly inside strategic enterprise customers to design, build, and deploy production-grade AI systems. We are looking for a Senior Security Engineer to embed with FDE delivery teams and own the security posture of production AI systems deployed in customer environments.
You conduct security reviews, perform threat modeling, build security automation, and ensure every FDE-delivered system meets both AWS and customer security standards. You move at the speed of the FDE team: weeks, not quarters. You don't just flag risks and hand them back. You find the vulnerability, design the fix, and ship the control.
This role combines the depth of a senior application security engineer with the urgency and customer-facing presence of forward-deployed engineering. You secure AI/ML pipelines end-to-end, build reusable security tooling that scales the FDE practice, and operate with a production mindset from day one of deployment.
This position requires that the candidate selected be a US Citizen.
Key job responsibilities
- Conduct security design reviews, threat modeling, and architecture assessments for production AI systems (agentic workflows, RAG pipelines, orchestration layers, model integrations, customer data pipelines)
- Embed with FDE delivery teams in customer environments; assess infrastructure security posture, identify gaps, implement controls while maintaining delivery velocity
- Build security automation and tooling: scanning, testing, monitoring capabilities purpose-built for forward-deployed AI systems; create reusable security accelerators
- Implement controls for AI-specific threats: prompt injection, guardrail bypass, model endpoint hardening, training data protection, output filtering, data isolation
- Integrate security into FDE engineering workflows: CI/CD security gates, secrets management, dependency scanning, container security
- Triage and respond to security incidents in production AI systems; build monitoring and alerting for AI-specific security signals
- Document solutions as reusable patterns, playbooks, and architectural guidance
- Requires up to 25% travel
10047
A day in the life
You start the day reviewing a pull request from an FDE engineer building a multi-agent orchestration system for a healthcare customer, catching an authorization gap before it ships. Mid-morning you're on-site with the customer's security team walking through your threat model for their RAG pipeline. After lunch you're writing a reusable Terraform module that enforces data isolation for multi-tenant AI deployments. You close out the day running automated guardrail tests against a Bedrock-powered application before it goes live. Every week brings a different customer, a different architecture, and a new AI security challenge.
About the team
AWS Forward Deployed Engineering embeds AI engineers directly inside strategic enterprise customers to build production AI systems. AWS invested $1B in this initiative. We move at the speed of the customer: demonstrating ROI in weeks, not quarters. We are customer-obsessed. We lead customers toward outcomes, build together, and leave behind scalable patterns. Security is our enabling function: without it, nothing goes to production. Our culture is people-first, anti-burnout, bold, and engineering-excellence-driven.
ABOUT AWS:
Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.
Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Mentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
You conduct security reviews, perform threat modeling, build security automation, and ensure every FDE-delivered system meets both AWS and customer security standards. You move at the speed of the FDE team: weeks, not quarters. You don't just flag risks and hand them back. You find the vulnerability, design the fix, and ship the control.
This role combines the depth of a senior application security engineer with the urgency and customer-facing presence of forward-deployed engineering. You secure AI/ML pipelines end-to-end, build reusable security tooling that scales the FDE practice, and operate with a production mindset from day one of deployment.
This position requires that the candidate selected be a US Citizen.
Key job responsibilities
- Conduct security design reviews, threat modeling, and architecture assessments for production AI systems (agentic workflows, RAG pipelines, orchestration layers, model integrations, customer data pipelines)
- Embed with FDE delivery teams in customer environments; assess infrastructure security posture, identify gaps, implement controls while maintaining delivery velocity
- Build security automation and tooling: scanning, testing, monitoring capabilities purpose-built for forward-deployed AI systems; create reusable security accelerators
- Implement controls for AI-specific threats: prompt injection, guardrail bypass, model endpoint hardening, training data protection, output filtering, data isolation
- Integrate security into FDE engineering workflows: CI/CD security gates, secrets management, dependency scanning, container security
- Triage and respond to security incidents in production AI systems; build monitoring and alerting for AI-specific security signals
- Document solutions as reusable patterns, playbooks, and architectural guidance
- Requires up to 25% travel
10047
A day in the life
You start the day reviewing a pull request from an FDE engineer building a multi-agent orchestration system for a healthcare customer, catching an authorization gap before it ships. Mid-morning you're on-site with the customer's security team walking through your threat model for their RAG pipeline. After lunch you're writing a reusable Terraform module that enforces data isolation for multi-tenant AI deployments. You close out the day running automated guardrail tests against a Bedrock-powered application before it goes live. Every week brings a different customer, a different architecture, and a new AI security challenge.
About the team
AWS Forward Deployed Engineering embeds AI engineers directly inside strategic enterprise customers to build production AI systems. AWS invested $1B in this initiative. We move at the speed of the customer: demonstrating ROI in weeks, not quarters. We are customer-obsessed. We lead customers toward outcomes, build together, and leave behind scalable patterns. Security is our enabling function: without it, nothing goes to production. Our culture is people-first, anti-burnout, bold, and engineering-excellence-driven.
ABOUT AWS:
Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.
Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Mentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
){kind=logo}
