Security Engineering Manager - Pen Testing & Compliance

Amazon; Texas; On-site; USD 150,000 - 240,000; Full time

Job summary

Amazon Stores Security is seeking a Security Engineering Manager (Pentest) to lead a high-caliber penetration testing team and to drive compliance-driven assessments across Amazon services, apps, and websites. You will shape strategy, mentor engineers, and partner with business teams to strengthen security controls while maintaining customer trust.

This role focuses on risk-based and compliance-driven testing, development of automation, and close collaboration with stakeholders to elevate

Qualifications

• 5+ years of security management experience.
• 5+ years in Information Security domains with knowledge of vulnerabilities, attack vectors, and testing methodologies.
• 3+ years driving Information Security initiatives across large organizations.
• 3+ years communicating with senior leadership and diverse partners.
• Experience identifying security issues and risks and developing mitigation plans.
• Knowledge of regulatory frameworks.

Responsibilities

• Lead, manage, and develop a high performing Penetration Testing Team across multiple locations.
• Set goals and priorities for the Compliance Penetration Testing function.
• Plan and execute compliance-driven penetration testing to regulatory standards.
• Drive automation and tooling to scale testing across Amazon's services.
• Influence leadership and partner with teams to implement security solutions and controls.
• Lead cross-group collaboration and clear communication on security initiatives.
• Produce high-quality documentation for technical and non-technical audiences.

Skills

Security management

Information Security

Leadership

Stakeholder communication

Automation initiatives

Job description

Amazon Stores Security is seeking a Security Engineering Manager (Pentest) to lead a high-caliber penetration testing team and to drive compliance-driven assessments across Amazon services, apps, and websites. You will shape strategy, mentor engineers, and partner with business teams to strengthen security controls while maintaining customer trust.

This role focuses on risk-based and compliance-driven testing, development of automation, and close collaboration with stakeholders to elevate