Senior Manager, Security Engineering, AWS Global ProServe Security

Amazon • Arlington, VA

3d

About The Position

AWS Professional Services combines AI-enhanced delivery, specialized solutions, deep industry expertise, and dedicated centers of delivery excellence (VMware, SAP, and more) to help organizations design, build, migrate, and manage their AWS workloads and applications. Businesses get unique access to AWS innovations, proven frameworks, and specialized capabilities to accelerate timelines, reduce risk, and deliver faster time to value.

AWS Global ProServe Security is looking for a Sr. Manager, Security Engineering, to lead our Engagement Security team. Customers ask AWS to help deliver, migrate, and innovate on their most important workloads, and that can mean helping with workloads that process regulated data or working in the customer’s production environment.

The Engagement Security team manages automation, processes, and policies that maintain AWS’s security bar in every high-risk customer interaction.

As a Security Leader, you will own building and managing a global team of security professionals while fostering a strong team culture. You should know how to prioritize, communicate clearly and compellingly, and understand how to drive a high level of focus and excellence with a strong team. You will set the security strategy and priorities for the Engagement Security team. You will lead a distributed team of cross-functional security professionals (such as security engineers, technical project managers, and program managers) who ensure that, when customers ask AWS to work on their data and systems, we keep the customer safe, we obey relevant regulations and policies, and we meet AWS’s high expectations for secure delivery.

You will also advise executive leadership by recommending information security investments which mitigate risks, strengthen defenses, and reduce vulnerabilities for business activities and operations. You will collaborate with customer-facing business stakeholders, legal, human resources, compliance and privacy specialists, in addition to AWS Security, to define information security requirements, specify risk mitigation workflows and engage the appropriate stakeholders to maintain operational and reputational integrity.

Requirements

• 10+ years of industry work with hands-on security engineering experience
• 10+ years of risk assessment and enabling organizations making security decisions experience
• 10+ years of team management and building (including coaching and mentoring) experience
• 10+ years of communicating technical concepts to a non-technical audience experience
• Bachelor's degree in Computer Science or a related field

Nice To Haves

• Knowledge of information security risk-based prioritization
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
• Experience applying threat modeling or other risk identification techniques or equivalent
• Experience architecting, securing, and operating Amazon Web Services
• Master's degree in Computer Science or a related field
• Knowledge of cloud computing services or deployment architecture

Responsibilities

• Driving security initiative planning, outcomes and improvements: Participate in wider leadership across AWS Security functions. Establish roadmap/strategic direction for our business generally and the team specifically
• Recruiting, team management and growth: Build, lead, and develop a high-performing security team with the right mix of skills. Assess performance and manage both high and low performers
• Processional development of team members: Define team goals, provide coaching, and foster a culture of innovation and collaboration. Hire, develop, and promote technical and non-technical team members
• Security guidance documentation, training and reviews: Assess security risks, establish mitigation strategies, and develop technical roadmaps. Partner with field teams to understand requirements and integrate security seamlessly into their work with AWS customers
• Security Escalations: Independently make short-term vs. long-term risk decisions, escalating as required. Act as a point of escalation for high-judgement decisions on information security risk, incorporating advice from teams like AWS Legal, AWS Security, and executive leadership as required
• Metrics, projections and inspections: Implement success metrics, reporting, and processes that measure program outcomes and effectiveness
• Collaborating with legal and compliance authorities within AWS to understand the impacts of laws and regulations
• Security tooling such as telemetry (logging, alerting, monitoring), drift detection, anomaly detection
• Inform best practices in information security around access control, authentication, identity management and incident response

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level