Security Engineering Manager — HR & Legal Systems

Amazon; Arlington (VA); On-site; USD 175,000 - 237,000; Full time

Job summary

Amazon is seeking an experienced Security Engineering Manager to lead a team protecting HR and Legal systems. This cross-functional role requires influencing partners across business and technical domains, prioritizing strategic impact, and elevating security across the software development lifecycle.

The ideal candidate will bring a strong background in application security management, threat modeling, architecture reviews, scanning, and remediation strategies, with experience guiding teams and

Qualifications

• Experience in threat modeling or other risk identification techniques or equivalent.
• Knowledge of security engineering for applications and services across the SDLC.
• Established background as an application/product security engineering manager with cross-functional leadership.

Responsibilities

• Assess security risks, establish mitigation strategies, and develop technical roadmaps for HR/Legal systems.
• Partner with cross-functional teams to implement security controls and drive remediation of identified risks.
• Hire, develop, and mentor security engineers and foster an inclusive, risk-aware culture.
• Drive security initiative planning and establish roadmap/strategic direction for the team.
• Implement metrics and processes to measure program outcomes and effectiveness.

Skills

Team leadership

Threat modeling

Architecture reviews

Security engineering

SDLC security

AI security awareness

Education

Bachelor's degree in CS/InfoSec

Master's degree (preferred)

Job description

Amazon is seeking an experienced Security Engineering Manager to lead a team protecting HR and Legal systems. This cross-functional role requires influencing partners across business and technical domains, prioritizing strategic impact, and elevating security across the software development lifecycle.

The ideal candidate will bring a strong background in application security management, threat modeling, architecture reviews, scanning, and remediation strategies, with experience guiding teams and