Amazon Security's Vulnerability Management Service (AVMS) manages the entire vulnerability management (VM) program across Amazon's retail business special teams, and AWS. AVMS operates at an unprecedented asset scale, as well as diversity of business lines ranging from Cloud, Health Care, Payments, Devices, Fulfillment, and even drones!
We're hiring a Principal Product Manager to own the end-to-end product strategy from vulnerability ingestion and agentic evaluation, through asset scanning and detection, to automated mitigation and remediation. This is not incremental product work. You will define how Amazon transitions from human-speed, ticket-driven vulnerability response to machine-speed, automation-first security posture management.
Key job responsibilities
As a Principal Product Manager, you own the product from vision, strategy, roadmap, and outcomes. You will:
Define and drive the multi-year product strategy for AVMS, ensuring coherence across intake, scanning, detection, and remediation workstreams that today span multiple converging teams
Own the product vision for agentic vulnerability management, translating the shift from human-speed to machine-speed VM into concrete product requirements, milestones, and success metrics
Drive stakeholder alignment across Amazon Security, AWS, Stores, and subsidiary business lines, each with differentiated asset types, risk tolerances, and operational constraints
Define the product framework for vulnerability prioritization in an era where AI-generated findings demand a fundamentally new risk model beyond CVSS and EPSS alone
Own the builder experience end-to-end, ensuring that automated mitigation and remediation solutions reduce builder toil rather than create new friction, and that the path to adoption is clear and low-effort
Partner with engineering leadership to make tradeoffs between operational load and investment in the agentic platform
Define success metrics
Engage directly with CISO stakeholders, remediation operations teams, and software builders to understand their needs and translate them into product direction
A day in the life
What You'll Work On
Three forces define this problem space: AI is accelerating both attackers and defenders. Exploit chains are now quicker than ever, vulnerability volume is growing with no signs of slowing. The diversity of Amazon's asset footprint demands solutions that work across fundamentally different compute models. You will own the product vision that ties all of this together.
The scope spans:
Intake & Orchestration - An agentic vulnerability evaluation framework that ingests signals beyond CVEs (threat intelligence, code commits, public PoCs, AI-generated findings) and processes them at machine speed
Asset Scanning Platform - 100% visibility across all Amazon assets including hosts, containers, client devices, and operational technology, modernized for context-aware, chain-aware detection
Detection Development - Scalable, automatically generated detections that account for multi-vulnerability exploit chains, not just single-issue pattern matching
Mitigation & Remediation - Automated patching triggered by update availability (not ticket creation), curated image vending, builder-facing agents that drive remediation without human intervention, and integration with partner mechanisms across Amazon Security
Stakeholder & Partner Integration - Product interfaces with software builder teams and security management systems
About the team
AVMS is an international organization. We are the convergence of Amazon's vulnerability management organizations of security engineers, software engineers, data engineers, and product managers chartered together to solve machine-speed vulnerability management at Amazon scale.
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.
BASIC QUALIFICATIONS
- Bachelor's degree
- Experience owning/driving roadmap strategy and definition
- Experience technical product management
- Experience working with and influencing senior level stakeholders
- Experience leading engineering discussions around technology decisions and strategy related to a product
PREFERRED QUALIFICATIONS
- Experience working directly with Engineers on product enhancements
- Experience in project management methodologies, business analysis, or process improvement
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, TX, Austin - 179,900.00 - 243,400.00 USD annually
