Security TPM for Bug Bounty & Vulnerability Programs

Amazon; Austin (TX); On-site; USD 127,000 - 172,000; Full time

Job summary

Amazon's Bug Bounty team seeks a Technical Program Manager to drive cross-functional programs securing services and applications used by Amazon customers. You will own long-term roadmaps, remove roadblocks, and ensure researchers have access and support to raise our security bar.

This fast-paced role requires ownership, sound judgment, and the ability to dive deep into technical problems while aligning stakeholders across engineering, security, and business teams.

Qualifications

• 3+ years of technical product or program management experience.
• 2+ years of software development experience.
• 3+ years of project management disciplines including scope, schedule, budget, quality, risk, and critical path management.

Responsibilities

• Lead technical programs that improve how Amazon responds to externally reported vulnerabilities.
• Define and scale internal processes for vulnerability intake, triage, and resolution.
• Build durable solutions that reduce repeat issues through automation, better tooling, and improved service team accountability.
• Collaborate with partner teams to improve test account support and ensure researchers have access to test securely and effectively.
• Communicate clearly and regularly with senior leaders, engineering teams, and external researchers.
• Own the long-term roadmap for specific areas of the Bug Bounty program and influence the broader team strategy.

Skills

Technical Program Management

Software Development

Cross-functional Collaboration

Project Management

Vulnerability Response

Job description

Amazon's Bug Bounty team seeks a Technical Program Manager to drive cross-functional programs securing services and applications used by Amazon customers. You will own long-term roadmaps, remove roadblocks, and ensure researchers have access and support to raise our security bar.

This fast-paced role requires ownership, sound judgment, and the ability to dive deep into technical problems while aligning stakeholders across engineering, security, and business teams.