Security Bug Bounty TPM: Lead Cross-Functional Vulnerability Programs

Amazon; Austin (TX); On-site; USD 127,000 - 172,000; Full time

Job summary

Amazon is seeking a Technical Program Manager for its Bug Bounty team. You will drive cross-functional programs to identify, triage, and resolve externally reported security vulnerabilities across services and applications, partnering with engineers, security teams, and business units to raise Amazon's security bar.

You will own roadmaps for areas of the Bug Bounty program and help scale processes, tooling, and accountability while communicating with senior leaders and external researchers.

Qualifications

• 3+ years of technical product or program management experience.
• 2+ years of software development experience.
• Experience managing programs across cross functional teams, building processes and coordinating release schedules.

Responsibilities

• Lead technical programs that improve how Amazon responds to externally reported vulnerabilities.
• Define and scale internal processes for vulnerability intake, triage, and resolution.
• Build durable solutions that reduce repeat issues through automation, better tooling, and improved service team accountability.
• Collaborate with partner teams to improve test account support and ensure researchers have the access they need to test securely and effectively.
• Communicate clearly and regularly with senior leaders, engineering teams, and external researchers.
• Own the long-term roadmap for specific areas of the Bug Bounty program and influence the broader team strategy.

Skills

Technical Program Management

Software Development

Cross-functional Collaboration

Program Management

Job description

Amazon is seeking a Technical Program Manager for its Bug Bounty team. You will drive cross-functional programs to identify, triage, and resolve externally reported security vulnerabilities across services and applications, partnering with engineers, security teams, and business units to raise Amazon's security bar.

You will own roadmaps for areas of the Bug Bounty program and help scale processes, tooling, and accountability while communicating with senior leaders and external researchers.