The AWS Infrastructure Security Boundary Protection team is seeking a Security Engineering Manager to lead initiatives that protect AWS's operational network across the full device lifecycle-from provisioning through decommissioning.
In this role, you will manage a team of engineers responsible for network access controls, vulnerability management, and security validation across AWS's global infrastructure. Your team will leverage best-in-class technologies, including:
- AI-powered anomaly detection
- Machine learning for exposure identification
- Configuration validation using automated reasoning
- Observability platforms
- ACL management
- Device fingerprinting
- Security telemetry systems
You will drive the application of artificial intelligence and machine learning to transform how we detect, prevent, and respond to security threats at unprecedented scale. Through leadership of your team, partnerships within Infrastructure Security, and relentless customer obsession, you will raise the bar for network security-driving the vision for securing the largest and most complex network in the world.
AWS leads and innovates. We research and pursue the best approach for the business, whether that means building new solutions or leveraging existing ones. AWS-and Infrastructure Security in particular-operates at massive scale and demands the highest standards, passion, and discipline for information security. The highest level of ownership and accountability is essential for this role.
Key job responsibilities
- Lead and develop a team of security engineers focused on network boundary protection, access controls, and vulnerability management across AWS's global infrastructure.
- Define and execute the strategic vision for securing AWS's operational network from device provisioning through decommissioning.
- Drive adoption of AI/ML-powered security solutions, including anomaly detection, automated reasoning for configuration validation, and machine learning for exposure identification.
- Own end-to-end security validation processes, ensuring consistent enforcement of access protection policies at scale.
- Partner cross-functionally with Infrastructure Security teams to identify gaps, reduce risk, and raise the security bar.
- Establish and track operational metrics to measure team effectiveness, threat detection coverage, and incident response readiness.
- Recruit, mentor, and retain top security engineering talent while fostering a culture of ownership, innovation, and operational excellence.
- Communicate security posture, risks, and strategic priorities to senior leadership with clarity and precision.
- Champion continuous improvement through automation, tooling investments, and process optimization to stay ahead of evolving threats.
BASIC QUALIFICATIONS
- 5+ years of managing and developing teams experience
- 5+ years of progressive work within a software security team or related operating environment experience
- Bachelor's degree in Computer Science, Information Security, or a related field
- Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
- Experience in managing and developing teams
- Experience in progressive work within a software security team or related operating environment
- Experience applying threat modeling or other risk identification techniques or equivalent
PREFERRED QUALIFICATIONS
- information security professional certification (SANS GIAC, CISSP etc.)
- Master's degree in Computer Science or a related field
- Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
- Experience managing remote team members
