AWS Application Security Manager, AWS Proactive Security

Cybersecurity Jobs; Austin (TX); On-site; USD 175,000 - 237,000; Full time

Benefits offered by this job

Sign-on payments

Restricted stock units (RSUs)

Health insurance (medical, dental, and

Life insurance}

401(k) matching

Paid time off

Parental leave

Job summary

Amazon’s AWS Proactive Security leads a team of application security engineers to raise the security standard across the portfolio, owning the security assurance process and using metrics to show measurable risk reduction over time.

Location: Austin, TX onsite. Salary: USD 175,100 - 236,900 per year. This role focuses on recruiting, coaching, and driving scalable security practices across engineering teams.

Qualifications

• Must have 5+ years of managing and developing teams.
• 5+ years in software security or related operating environment.
• Bachelor’s degree in Computer Science, Information Security, or related field.
• Knowledge of security of web services, cryptography, network security protocols, and operating system security.
• Experience applying threat modeling or other risk identification techniques.

Responsibilities

• Lead, grow, and organize a team of application security engineers, including ownership of professional development and coaching.
• Set strategy for increasing the application security bar and evolve the security assurance process your team operates.
• Own security reviews, threat modeling, and penetration test coordination for your portfolio.
• Define metrics and perform data analysis to measure team performance and security outcomes, focusing on risk reduction.
• Review active security reviews and threat models to unblock engineers and weigh in on high-risk findings.
• Drive process and operational improvements that scale review capacity as demand grows.
• Partner with service and business teams to guide penetration test coordination and remediation support.
• Represent the organization to business leaders and technical staff, providing risk-mitigation guidance.
• Manage recruiting, team composition, and hiring bar for your area.
• Contribute to cross-AWS security initiatives and communicate status and results.

Skills

Team management

Security leadership

Threat modeling

Application security

Coaching & mentoring

Education

Bachelor's degree in Computer Science / Information Security

Job description

Amazon’s AWS Proactive Security helps secure AWS launches with structured security reviews, threat modeling, and coordinated penetration testing. In this role, you will lead a team of application security engineers and help raise the application security bar across your area, while owning the security assurance process and using metrics to show measurable risk reduction over time.

What you’ll do

• Lead, grow, and organize a team of application security engineers, including ownership of professional development and coaching through 1:1s, stretch assignments, and hands-on guidance.
• Set strategy for increasing the application security bar and evolve the security assurance process your team operates.
• Own security reviews, threat modeling, and penetration test coordination for your portfolio.
• Define metrics and perform data analysis to measure team performance and security outcomes, focusing on whether the risk is actually being reduced rather than activity counts.
• Review active security reviews and threat models to unblock engineers and weigh in on the highest-risk or most ambiguous findings.
• Drive process and operational improvements that scale review capacity as demand grows.
• Partner with service and business teams to guide penetration test coordination and support remediation of security issues.
• Represent the organization to business leaders and technical staff at all levels, providing clear technical direction and risk-mitigation guidance.
• Manage recruiting, team composition, and hiring bar for your area.
• Contribute to cross-AWS security initiatives and communicate status and results across the organization.
• Participate in complex engineering discussions to ensure proper risk assessment and threat analysis is performed.

Key responsibilities in the day-to-day

You will dig into review throughput, SLA adherence, finding quality, and risk reduced, then decide where to invest next. You will also provide reliable judgment and mature communication while weighing in on critical findings and unblocking engineering teams.

Requirements

• 5+ years of managing and developing teams experience
• 5+ years of progressive work within a software security team or related operating environment
• Bachelor’s degree in Computer Science, Information Security, or a related field
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols, and operating system security
• Experience applying threat modeling or other risk identification techniques (or equivalent experience)

Preferred qualifications

• CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, or PenTest+
• Master’s degree in Computer Science or a related field
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
• Experience managing remote team members

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, and an option for Supplemental life plans). EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

About the team

• Diverse Experiences
• Inclusive Team Culture
• Training & Career Growth
• Work/Life Balance

Location: Austin, TX (onsite)

Salary: USD 175,100 - 236,900 per year