Manager, Security Engineering, Corporate Services Security (CPSS)

Socket.dev; Arlington (VA); On-site; USD 175,000 - 237,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Stock units (RSUs)

Job summary

Amazon’s SEALS team is seeking a Security Engineering Manager to lead and elevate security across Employee and Legal Systems. You will shape strategic security direction for the software development lifecycle, mentor engineers, and partner with PXT and Legal teams to address risk with scalable controls.

You’ll drive large-scale programs, guide architecture reviews, and implement metrics to measure outcomes, while aligning security with business objectives and delivering high-quality results for

Qualifications

• 5+ years of managing and developing teams.
• 5+ years of progressive work within a software security team or related operating environment.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Knowledge of security of web services, cryptography, and network security protocols.
• Experience applying threat modeling or other risk identification techniques.

Responsibilities

• Assess security risks, establish mitigation strategies, and develop technical roadmaps.
• Partner with PXT and Legal teams to understand requirements and integrate security into their work.
• Hire, develop, and mentor security engineers and manage day-to-day activities of the team.
• Drive security initiative planning, outcomes and improvements and establish roadmap for the team.
• Implement success metrics, reporting, and processes to measure program outcomes and effectiveness.

Skills

Team management

Software security

Threat modeling

Architecture reviews

Security assessments

Education

Bachelor's degree in CS/Info Security

Master's degree (preferred)

Job description

Lead a team of Security Engineers protecting Amazon's HR and and Legal systems.This is an inherently cross-functional role working across business and technical domains; it requires a strong ability to influence others, partner effectively, and know where to prioritize for strategic impact.

The Corporate Services Security (CPSS) Security for Employee and Legal Systems (SEALS) team protects Amazon's enterprise HR and Legal applications, ensuring they meet the high security standards. You'll elevate our security strategy through broad leadership, cross-functional collaboration, and delivery of high-quality results that push us to continuously improve for our customers. You will set the strategic direction for the entire software development lifecycle while developing and taking your team to the next level. Ideal candidates will have an established background as an application/product security engineering manager with experience spanning threat modeling, architecture reviews, scanning and assessments, and remediation/mitigation approaches. You will understand AI application security threats and embrace AI to scale delivery. You will combine technical leadership with managerial depth, with a proven track record of aligning security with the strategies of the businesses you support and collaborating effectively with builder teams throughout the phases of the SDLC.

Key job responsibilities

• Assess security risks, establish mitigation strategies, and develop technical roadmaps. Partner with PXT and Legal builder teams to understand requirements and integrate security seamlessly into their work. Align with key business stakeholders to ensure that objectives are focused on areas of key concern and change; provide technical oversight for all phases of the software development lifecycle.
• Partner with peers, partners, customers and stakeholders to prioritize and drive implementation of security-related technical and process controls to remediate risks identified during engagements. Communicate updates to senior security and business leadership on a regular cadence.
• Hire, develop, and mentor security engineers, and manage the day-to-day activities of the team. Create the organization of the future by driving a culture of inclusion where team members are encouraged to take risks and push limits to challenge organizational security assumptions.
• Drive security initiative planning, outcomes and improvements: Participate in wider leadership across CPSS and Amazon Security functions. Establish roadmap/strategic direction for the team
• Implement success metrics, reporting, and processes that measure program outcomes and effectiveness.

A day in the life

• Owning and driving large-scale programs and campaigns for awareness of policy or adoption of new security mechanisms
• Using automation to scale security mechanisms across the business and minimize friction around security controls
• Conducting threat modeling sessions, architecture reviews, and security assessments with PXT and Legal builder teams throughout the SSDLC
• Diving deep into the control landscape and operations of corporate services with builder teams
• Owning security escalation action items and informing Senior Leadership on short, medium, and long-term recommendations to triage escalations and mitigate risks
• Bar raising deliverables and mentoring team members and builders

About the team

SEALS (Security for Legal and Employee Services) supports Amazon's People eXperience & Technology (PXT) and Legal teams. We are the dedicated Business Security team responsible for protecting the critical systems that power Amazon's workforce and legal operations. Our mission is to ensure these enterprise business applications meet the high security standards required to maintain and enhance customer trust.

Basic Qualifications

• 5+ years of managing and developing teams experience
• 5+ years of progressive work within a software security team or related operating environment experience
• Bachelor's degree in Computer Science, Information Security, or a related field
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
• Experience in managing and developing teams
• Experience in progressive work within a software security team or related operating environment
• Experience applying threat modeling or other risk identification techniques or equivalent

Preferred Qualifications

• information security professional certification (SANS GIAC, CISSP etc.)
• Master's degree in Computer Science or a related field
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 175,100.00 - 236,900.00 USD annually