Technical Program Manager, Bug Bounty & Security

Amazon; Seattle (WA); On-site; USD 127,100 - 172,000; Full time

Job summary

Amazon’s Bug Bounty team is seeking a Technical Program Manager to drive cross-functional programs that improve how we identify, triage, and resolve externally reported security vulnerabilities across services and customer-facing applications.

You’ll partner with engineering, security, and business teams to improve processes, remove roadblocks, and ensure researchers have the access and support they need to help raise our security bar.

Qualifications

• 3+ years of technical product or program management experience.
• 2+ years of software development experience.
• 3+ years of project management disciplines including scope, schedule, budget, quality, along with risk and critical path management experience.
• Experience managing programs across cross functional teams, building processes and coordinating release schedules.
• 3+ years of working directly with engineering teams experience.

Responsibilities

• Lead technical programs that improve how Amazon responds to externally reported vulnerabilities.
• Define and scale internal processes for vulnerability intake, triage, and resolution.
• Build durable solutions that reduce repeat issues through automation, better tooling, and improved service team accountability.
• Collaborate with partner teams to improve test account support and ensure researchers have the access they need to test securely and effectively.
• Communicate clearly and regularly with senior leaders, engineering teams, and external researchers.
• Own the long-term roadmap for specific areas of the Bug Bounty program and influence the broader team strategy.

Skills

Technical program management

Software development

Project management

Cross-functional leadership

Engineering collaboration

Job description

Amazon’s Bug Bounty team is seeking a Technical Program Manager to drive cross-functional programs that improve how we identify, triage, and resolve externally reported security vulnerabilities across services and customer-facing applications.

You’ll partner with engineering, security, and business teams to improve processes, remove roadblocks, and ensure researchers have the access and support they need to help raise our security bar.