Silicon Development Infrastructure Security, Annapurna ML
Protect the cloud and hybrid infrastructure supporting Machine Learning Accelerators at Annapurna Labs.
About the role
This role owns the security posture of the cloud and hybrid infrastructure that powers silicon development at Annapurna Labs. You will be embedded as a security partner in the ML Infrastructure team, working directly with software, system, and chip methodology engineers to secure compute and developer platforms.
What you'll do
- Own the security findings backlog end to end by triaging vulnerability findings, assessing CVE/CVSS scoring, and driving remediation across host and container systems.
- Maintain and improve automated patching pipelines across RHEL/Rocky Linux, Amazon Linux, and Windows Server fleets using dnf/yum, AWS Systems Manager Patch Manager, and golden-AMI pipelines.
- Conduct third-party security assessments and design isolated partner environments using VPC segmentation, security groups, Transit Gateway, and AWS PrivateLink.
- Architect and audit access controls across cloud accounts using AWS IAM roles, SCPs, Active Directory, LDAP, SSSD, Kerberos, and bastion hosts.
- Build security automation, alerting, and dashboards using Python, Bash, AWS Lambda, EventBridge, CloudWatch, GuardDuty, and Amazon Bedrock.
- Perform threat modeling and design reviews on infrastructure using STRIDE and data-flow diagrams to inspect network ingress/egress, secrets handling, and logging coverage.
What you'll need
- Experience in security engineering across cloud and hybrid infrastructure environments.
- Hands-on experience with vulnerability management, CVE/CVSS triage, and host/container scanning tools such as AWS Inspector.
- Proficiency in patching automation across Linux fleets (RHEL, Rocky Linux, or Amazon Linux) using systems like AWS Systems Manager Patch Manager and golden-AMI pipelines.
- Expertise in cloud identity and access management, including AWS IAM, SCPs, directory integration (LDAP, Active Directory, PAM, Kerberos), and authentication protocols (OIDC/SAML).
- Experience writing security automation and infrastructure as code using Python, Bash, AWS CDK, CloudFormation, Terraform, or Ansible.
- Knowledge of network security controls including VPC segmentation, Transit Gateway, NACLs, client VPN, and KMS encryption.
Skills: vulnerability management, IAM, patching automation, AWS, infrastructure as code
More semiconductor jobs: Amazon jobs · Austin jobs
First seen in our index 0 days ago, well below the 56-day median for Infrastructure/Platform Software roles.
Infrastructure/Platform Software · Infrastructure Platform
|
Open roles in category
1034
|
Median days since first seen
56 d
|
Category median salary (all employers)
$236k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Amazon | All employers we track in this specialty (1034 roles · 94 employers) |
|---|---|---|
| Open roles in this specialty | 3 | 1034 |
| Open roles in the wider Software, Firmware & Systems family | 10 | 6577 · 158 employers |
| Median days since first seen | 0 d | 56 d (+56 d vs this employer) |
| Median salary (USD postings) | n/a | $236k |
Skills observed across this category: vulnerability management, IAM, patching automation, AWS, infrastructure as code
Who's hiring in this category
- NVIDIA · 345 open roles · median 60 d
- Qualcomm · 56 open roles · median 61 d
- AMD · 54 open roles · median 36 d
- Graphcore · 47 open roles · median 117 d
- Arm Holdings · 37 open roles · median 14 d
- Intel Corporation · 36 open roles · median 22 d
How we counted: 1034 open Infrastructure/Platform Software (Infrastructure Platform) roles from 94 employers tracked in the SemiconductorJobs index, counted 11 Nov 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there, and is counted in the wider Software, Firmware & Systems family row. Days are counted from when our index first saw each posting, not from the employer's original posting date.