> Markdown version of [/jobs/ext/2044757-software-development-engineer-leo-security](https://www.wearedevelopers.com/jobs/ext/2044757-software-development-engineer-leo-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Development Engineer, Leo Security - **Company:** Amazon.com, Inc. - **Location:** Seattle, WA, United States - **Salary:** $143,700.0 - $194,400.0 - **Contract:** Internship / Graduate position - **Skills:** Java (Programming Language), Software Applications, Big Data, C Sharp (Programming Language), C++ (Programming Language), Profiling, Code Review, Cyber Security, Computer Programming, Software Debugging, Software Design Patterns, Distributed Systems, Memory Management, Perl (Programming Language), Fault Tolerance, Graph Database, Internet Protocol Security (IP SEC), Network Security, Message Passing Interface, Neo4j, Performance Tuning, Software Engineering, Multithreading, Large Language Models, Multi-Agent Systems, Information Technology, Build Process, ArcSight Event Correlation, Software Coding, Stream Processing, Software Version Control, Programming Languages - **Published:** August 13, 2026 - **Apply:** https://www.amazon.jobs/en/jobs/10500803/software-development-engineer-leo-security ## About the Role 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - 1+ years of designing and developing large-scale, multi-tiered, multi-threaded, embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl experience - Bachelor's degree or foreign equivalent in Computer Science, Engineering, Mathematics, or a related field - Experience programming with at least one software programming language, 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Experience in one or more of the following domains: access- control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security - - Experience with performance optimization, including memory management, multi-threading, and profiling production systems - - Experience with distributed systems fundamentals, including consensus, message passing, and fault tolerance - - Experience with real-time event correlation or stream processing systems - - Experience building systems that integrate with LLM APIs or agent frameworks - - Experience with graph databases, knowledge graph platforms, or large-scale data modeling (Neptune, Neo4j, or equivalent) ## Description You will own building software features across the platform and deliver them end to end: clarify the requirements, write the design, ship the code, instrument the system, and keep it healthy in production. The features you own are concrete and high-consequence: the live state-of-the-world record that answers where every tracked device is, who last held it, and whether it is where it should be; consolidated detection that surfaces events from every Leo site type as one signal instead of siloed alarms; automated triage so security events arrive enriched and pre-adjudicated, with containment executed in seconds under human approval; self-service workflows that cut multi-day manual processes down to seconds; and the instrumentation that produces the metrics the security organization reports against. You will code independently, make design tradeoffs with guidance from the senior engineers who own the platform architecture, review your teammates' code, and operate what you build. A day in the life One morning you might ship a correlation feature that joins device, custody, and access events so triage surfaces a pattern no single data source shows. That afternoon you could be debugging why a detection's latency regressed, profiling the pipeline stage that slowed it down, and adding the metric that catches it next time. The next day you might pair with an applied scientist to backtest a candidate detection against retained telemetry before it ships, then pick up an operational ticket and automate away its root cause so no one handles it again. You will obsess over the two latencies that define the platform, the time from event to detection and the time from detection to containment action, and treat every manual step you find as a candidate for deletion. The team is new, so what you build now becomes the foundation others build on. About the team Leo Infrastructure and IP Security protects the people, facilities, hardware, and supply chain behind a global satellite constellation. The Engineering and R\&D team within this organization builds the platforms and tooling the security pillar teams operate on, moving security operations from manual triage to correlation-based detection, automated response, and agentic AI. The team is composed of applied scientists, software engineers, and security engineers working across physical and digital security domains. #### Inclusive Team Culture In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. #### Training & Career Growth We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. #### Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Putting the Graph In GraphQL With The Neo4j GraphQL Library](https://www.wearedevelopers.com/videos/257-putting-the-graph-in-graphql-with-the-neo4j-graphql-library) - [Profiling Symfony & PHP apps with Blackfire](https://www.wearedevelopers.com/videos/265-profiling-symfony-php-apps-with-blackfire) - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)