Amazon People Tech Security is looking for a highly skilled, experienced, and motivated Security Engineering Manager to lead and grow a security engineering team. You and your team will be responsible for (a) developing automation and tooling to identify, manage and monitor security risks at scale, (b) integrating security requirements into products and processes, (c) proactively performing security assessments to detect and prevent security vulnerabilities, (d) conducting trainings to raise developer awareness of security best practices, (e) performing security testing before release, and (f) partnering closely with our development teams to produce innovative and secure solutions.

As a security leader, you will (a) innovate and solve security challenges at a massive scale, (b) participate in Amazon People Tech Security strategy and direction, road-map planning, and project execution scheduling, (c) hire, build and manage team of security engineers, and (d) foster strong team culture.

A successful candidate will be a deeply curious individual who brings technical and leadership expertise and ability to work within a fast-paced startup culture in a large company that has broad business impact. This is a unique and rare opportunity to get in on the ground floor and build innovative solutions as a security leader.

Responsibilities:

• Team management, growth, and organization
• Professional development of team members
• Project management
• Deliver security metrics and projections
• Drive security initiatives and security tool development
• Recruiting
• Drive process improvement
• Perform application security reviews to identify security issues and risks, and develop mitigation plans
• Advise and consult with internal customers on risk assessment, threat modeling, code review, and vulnerability remediation
• Provide expert advice to internal customers on developing secure architectures
• Review of third-party services (e.g. SaaS-providers)
• Participate and drive audits, assessments, and penetration testing
• Manage projects and research work as needed
• Develop and deliver security training and outreach to internal development teams
• Review and update security guidance documentation
• Participate in security escalations support

BASIC QUALIFICATIONS

• Bachelor's Degree or MS in Computer Science or related field
• At least 7 years of experience in application, secure software or system design
• At least 5 years of experience in software development or security role working with development team(s) that delivered commercial software or software-based services
• Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits

PREFERRED QUALIFICATIONS

• Experience with building software solutions (managing development teams, writing code)
• Ability to deliver high quality solutions while working in a fast-paced environment
• Strong project management experience desired for working on cross-functional projects
• Demonstrated track record of project delivery with evolving requirements
• Demonstrated ability to lead and mentor software developers or security engineers while building and maintaining high agility and high morale
• Excellent written and verbal technical communication with an ability to present complex technical information in a clear and concise manner to a variety of audiences
• Significant experience and detailed technical knowledge in multiple areas of: security engineering, system and network security, authentication and security protocols, cryptography, and application security
• Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
• Strong scripting skills in one or more of the common languages (e.g., Perl, Python, Ruby, shell scripting)
• Experience with a wide range of technologies and the ability to pick up new technologies quickly
• Experience with the application of threat modeling or other risk identification techniques
• Experience designing and/or reviewing the security of systems in conjunction with a development team
• Experience in risk identification, secure software design, secure architectures, security testing, or vulnerability detection or remediation
• Sharp analytical abilities and proven design skills
• Excellent leadership skills and teamwork skills
• Results oriented, high energy, self-motivated