Do you want to secure Amazon's most customer-centric experiences? As a Security Engineering Manager on the Endpoint Security Team, you'll lead a team that designs, implements, and operates security solutions integral to how Amazon's Customer Service Associates worldwide interact with customers every day.
You'll manage a team of engineers responsible for securing the entire technology stack-from device firmware to cloud-scale data processing-within a DevSecOps organization. Your primary responsibility is identifying security risks and driving them to zero. You'll define the security posture for your organization, establish where gaps in visibility and control exist, and own the strategy to close them. You'll collaborate with development and operations teams across Amazon to ensure security is embedded in every layer of delivery, continuously raising the bar while enabling Customer Service to move fast and innovate.
You'll play a critical role in every interaction where Customer Service operations personnel access and handle customer data. You'll obsess over securing the CSA-to-customer interaction and enabling Customer Service to delight Amazon's customers.
Key job responsibilities
You will independently manage a two-pizza team of engineers, develop their careers, and foster a culture of security ownership and inclusivity. You will build and own mechanisms that identify risks across our technology stack and drive them to resolution. You will be the primary voice of security in our development process-partnering with development and operations teams to ensure security is embedded from design through deployment, not addressed as an afterthought. You will be involved in three-year planning, annual planning, and business updates where our team states our plans and our progress. You will interact with other engineering managers and their teams, data professionals, and product and program teams to build cohesive strategies to secure Customer Service's endpoints.
A day in the life
You will work with your directs day in and day out, helping them solve problems, grow their security expertise, and advance their careers. You will continuously assess where risk exists in our stack, and drive your team to close gaps in visibility and control. On at least a weekly basis, you will meet with the leadership team to discuss the biggest security risks facing the organization and how we are driving them to resolution. You will also interact with senior leadership as we make plans and review CS Security-wide initiatives, representing your team's security posture and communicating risk clearly.
About the team
We are team dispersed across multiple locations, but mainly in Seattle, Toronto, and Austin. As a security team responsible for products used day in and day out by Customer Service, we must balance security with usability but recognize that the most secure products can also be the most usable products. Because of the complex nature of Customer Service, we invest in solutions that allow us to flex and pivot quickly to meet an ever-changing business and security landscape.
BASIC QUALIFICATIONS
- 10+ years of industry work with hands-on security engineering experience
- 10+ years of risk assessment and enabling organizations making security decisions experience
- 10+ years of team management and building (including coaching and mentoring) experience
- 10+ years of communicating technical concepts to a non-technical audience experience
- Bachelor's degree in Computer Science or a related field
- Experience communicating technical concepts to a non-technical audience
- Experience with hands-on security engineering
- Experience in risk assessment and enabling organizations to make security decisions
- Experience in team management and building (including coaching and mentoring)
PREFERRED QUALIFICATIONS
- Knowledge of information security risk-based prioritization
- Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience architecting, securing, and operating Amazon Web Services
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, WA, Seattle - 208,300.00 - 281,800.00 USD annually
