The AWS Infrastructure Security Operations team is seeking a Security Engineering Manager to lead the detection and response mission protecting AWS's operational network. Your team owns the full detection-to-response lifecycle-authoring the detection rules that surface threats, triaging and investigating security events, and driving incidents to resolution across AWS's global infrastructure.

In this role, you will manage a team of security engineers responsible for network security telemetry, detection engineering, and incident response. Your team will leverage best-in-class technologies, including:
• AI-powered anomaly and threat detection
• Machine learning for signal enrichment and alert prioritization
• Detection-as-code pipelines (e.g. IDS/IPS and syslog-based rule engines)
• Network security telemetry and observability platforms
• Threat intelligence integration
• Forensic and root-cause analysis systems



You will drive the application of artificial intelligence and machine learning to transform how we detect, investigate, and respond to security threats at unprecedented scale. Through leadership of your team, partnerships within Infrastructure Security, and relentless customer obsession, you will raise the bar for threat detection and response-driving the vision for defending the largest and most complex network in the world.

AWS leads and innovates. We research and pursue the best approach for the business, whether that means building new solutions or leveraging existing ones. AWS-and Infrastructure Security in particular-operates at massive scale and demands the highest standards, passion, and discipline for information security. The highest level of ownership and accountability is essential for this role.

Key job responsibilities
• Lead and develop a team of security engineers focused on detection engineering, incident response, and security operations across AWS's global infrastructure.
• Define and execute the strategic vision for detecting and responding to security threats across AWS's operational network, from signal generation through incident resolution.
• Drive adoption of AI/ML-powered detection and response solutions, including anomaly detection, alert prioritization, and automated triage of security events.
• Own the end-to-end detection lifecycle, ensuring high-fidelity detection coverage, low false-positive rates, and consistent, measurable incident response outcomes.
• Partner cross-functionally with Infrastructure Security teams to close detection gaps, reduce mean-time-to-detect and mean-time-to-respond, and raise the security bar.
• Establish and track operational metrics to measure detection coverage, on-call health, incident response readiness, and overall team effectiveness.
• Recruit, mentor, and retain top security engineering talent while fostering a culture of ownership, innovation, and operational excellence.
• Communicate security posture, active threats, and strategic priorities to senior leadership with clarity and precision.

Champion continuous improvement through automation, tooling investments, and process optimization to stay ahead of evolving threats.

BASIC QUALIFICATIONS

- 5+ years of managing and developing teams experience

- 5+ years of progressive work within a software security team or related operating environment experience

- Bachelor's degree in Computer Science, Information Security, or a related field

- Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security

- Experience in managing and developing teams

- Experience in progressive work within a software security team or related operating environment

- Experience applying threat modeling or other risk identification techniques or equivalent

PREFERRED QUALIFICATIONS

- information security professional certification (SANS GIAC, CISSP etc.)

- Master's degree in Computer Science or a related field

- Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques

- Experience managing remote team members

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, MN, Minneapolis - 175,100.00 - 236,900.00 USD annually

USA, WA, Seattle - 175,100.00 - 236,900.00 USD annually