Application deadline: Jun 17, 2026
Amazon Traffic Engineering is looking for an experienced manager to lead a new Red Team focused on bot mitigation and DDoS defense. You'll build and grow a team of elite offensive security engineers who simulate real-world bot attacks and DDoS campaigns against Amazon's internet-facing infrastructure, directly improving the defenses that serve billions of requests daily.
Traffic Engineering securely connects all customers worldwide to SDO services and Stores marketplaces. We focus on protecting and optimizing internet-facing services, while meeting the evolving standards of the public-facing internet. As GenAI capabilities rapidly advance, with AI agents autonomously browsing the web, agentic browsers executing multi-step tasks, and LLM-powered bots capable of mimicking human behavior at scale, the threat landscape is fundamentally shifting. As the founding Red Team Manager, you will define the offensive strategy for identifying and simulating these novel AI-driven threats before they become commonplace, ensuring Amazon's defenses stay ahead of adversaries leveraging autonomous agents for scraping, inventory manipulation, and distributed attacks.
Key job responsibilities
- Recruit, mentor, and grow a team of offensive security engineers
- Plan and run intelligence-driven red team operations targeting bot detection platforms, WAFs, CDN protections, and DDoS mitigation services; develop custom tooling for anti-detect browser automation, TLS fingerprint manipulation, and behavioral replay
- Identify and simulate emerging AI-driven attack vectors including autonomous browsing agents, LLM-powered bots, agentic scraping before they become widespread, keeping Amazon's defenses ahead of the curve
- Establish workflows with bot detection engineering teams to translate offensive findings into measurable defensive improvements
- Report findings as executive summaries for senior leadership in business risk language and detailed technical breakdowns for engineering teams to drive remediation
BASIC QUALIFICATIONS
- 5+ years of managing and developing teams experience
- 5+ years of progressive work within a software security team or related operating environment experience
- Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
- Experience applying threat modeling or other risk identification techniques or equivalent
PREFERRED QUALIFICATIONS
- Experience managing remote team members
- 3+ years of experience in offensive security (red teaming, adversary simulation, penetration testing)
- Experience conducting or managing DDoS simulation testing at scale
- Experience with anti-detect browser frameworks (Nodriver, Puppeteer Stealth variants), TLS fingerprint spoofing, Canvas/WebGL evasion techniques
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, , Virtual - 175,100.00 - 236,900.00 USD annually
