Within AWS Proactive Security, our Application Security teams make sure AWS launches new products, services, and features securely. We are looking for a Security Engineering Manager to lead a team of application security engineers responsible for security reviews, threat modeling, and hands-on security evaluations across a portfolio of AWS's largest customer-facing sales, partner, and field organizations. You will own the security posture for your area, guide penetration test coordination, and set the strategy for how your team raises the security bar - while remaining flexible as ownership evolves across our organization.

This role pairs long-term strategic planning with the challenge of reacting quickly to new threat scenarios. You will set direction for a team of security professionals, evolve the security assurance process they run on, and - critically - define how we measure whether that process is actually working. As we transform the role of security from a point-in-time gate into a continuous, outcome-driven discipline, you will be responsible for building the metrics and data analysis that show how your team is performing, where the risk actually lies, and whether the security bar is rising over time.

As a Security Engineering Manager, you speak authoritatively on behalf of your team, and your technical knowledge demonstrates both depth and breadth. You are responsible for your team's structure and how it operates within the larger AWS Security organization - leveraging the strengths of individual engineers, delegating appropriately, and managing delivery of long-term projects. You have deep knowledge in application security, are a sought-after thought leader across the organization, and actively participate in the organization's planning processes. You will provide clear technical direction and risk-mitigation guidance to engineering and business leaders at every level, and you will be comfortable diving into complex engineering discussions to ensure proper risk assessment and threat analysis is performed.

Measurement is central to this role. You will define metrics that quickly and accurately present your team's performance and variance against its goals, use data to understand input drivers and where to invest, and communicate status and results effectively across the division. You will coordinate and contribute to cross-AWS security initiatives, and you will foster the professional growth of your engineers - seeking out stretch assignments and developing the next generation of security leaders on your team.

Key job responsibilities

- Lead, grow, and organize a team of application security engineers, and own their professional development

- Set the strategy for raising the application security bar across your area, and evolve the security assurance process your team operates

- Define metrics and data analysis to measure team performance, security outcomes, and whether the security bar is rising - moving beyond activity counts to demonstrated risk reduction

- Own security reviews, threat modeling, and penetration test coordination for your portfolio

- Drive and contribute to cross-AWS security initiatives, communicating status and results across the organization

- Manage recruiting, team composition, and hiring bar for your area

- Identify and deliver process and operational improvements that scale the team's review capacity

- Directly represent the organization to business leaders and technical staff at all levels

- Demonstrate reliable judgment, integrity, business acumen, and mature communication skills

A day in the life

-Reviewing your team's active security reviews and threat models, unblocking engineers and weighing in on the highest-risk or most ambiguous findings

-Digging into the data on how your team is performing - review throughput, SLA adherence, finding quality, and risk reduced - and deciding where to invest next

-Coaching and developing your engineers through 1:1s, stretch assignments, and hands-on technical guidance

-Partnering with service and business teams to guide penetration test coordination and drive remediation of security issues

-Providing clear technical direction and risk-mitigation guidance to engineering and business leaders across the organization

-Setting and evolving the strategy for how your team raises the application security bar as the business grows and threats change

-Contributing to cross-AWS security initiatives and representing your team's work and results to leadership

-Diving into complex engineering discussions to ensure proper risk assessment and threat analysis is performed

BASIC QUALIFICATIONS

- 5+ years of managing and developing teams experience

- 5+ years of progressive work within a software security team or related operating environment experience

- Bachelor's degree in Computer Science, Information Security, or a related field

- Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security

- Experience in progressive work within a software security team or related operating environment

- Experience applying threat modeling or other risk identification techniques or equivalent

PREFERRED QUALIFICATIONS

- CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+

- Master's degree in Computer Science or a related field

- Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques

- Experience managing remote team members

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, TX, Austin - 175,100.00 - 236,900.00 USD annually