Security Engineering Manager

Join to apply for the Security Engineering Manager - Incident Response, AWS role at Amazon Web Services (AWS)

2 days ago Be among the first 25 applicants

Join to apply for the Security Engineering Manager - Incident Response, AWS role at Amazon Web Services (AWS)

Get AI-powered advice on this job and more exclusive features.

Description

We are looking for an experienced security leader to join the Cloud Security team. As a security leader, you will own building and managing a team of incident managers and technical leaders, fostering a strong team culture. You and your team will be expected to drive engineering teams to take the right actions in the right time frames to mitigate risks.

We're seeking a leader passionate about cloud computing and building a high-performing incident management team, working closely with incident responders. You should have a track record of delivering high-quality technology products and services in a hyper-growth environment with shifting priorities. Strong prioritization, clear communication, and driving focus and excellence are essential. Cloud Incident Management operates at a very large scale, demanding high standards, so discipline around security and delivery is critical. Ownership and accountability are a must.

Key job responsibilities

1. Build and lead a high-performing team of security engineers, focusing on recruitment, development, and retention of top security talent.
2. Drive operational excellence in incident management processes, establishing and maintaining SLAs, metrics, and quality standards for security response activities.
3. Partner with service teams and stakeholders across AWS to ensure security issues are properly prioritized and remediated according to risk levels and customer impact.
4. Develop and implement strategic initiatives to improve security response capabilities, including automation, process improvements, and scaling mechanisms.
5. Foster a culture of ownership, continuous learning, and psychological safety while maintaining high security standards and operational excellence.
6. Manage cross-organizational relationships and communication channels to ensure effective escalation paths and resolution of complex security challenges.
7. Lead the development and implementation of security frameworks and controls that balance risk mitigation with business objectives and builder experience.
8. Establish and maintain mechanisms for measuring team performance, operational metrics, and security program effectiveness.
9. Guide architectural decisions and technical strategy for security solutions across multiple organizations and services.
10. Mentor and develop future security leaders while creating growth opportunities for team members.

A day in the life

As a Security Manager, your day typically starts with reviewing overnight security incidents and operational metrics during the team's daily standup. You'll spend time in 1:1s with your direct reports, providing guidance on complex security issues and career development. Throughout the day, you'll participate in strategic planning sessions with service teams, review architectural proposals, and work on improving incident response processes. You'll also engage with senior leadership to provide updates on critical security initiatives and handle escalations when necessary. The role requires balancing tactical incident management with long-term strategic planning while ensuring your team maintains high security standards at scale.

About The Team

Inclusive Team Culture

Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (diversity) conferences. Amazon's culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.

Work/Life Balance

Our team values work-life balance. It's about establishing a flow that energizes both your personal and professional life. We offer flexibility in working hours and encourage you to find your own balance.

Mentorship & Career Growth

We support new members with a diverse range of experience levels. We promote knowledge sharing and mentorship, and we aim to assign projects that help each member grow into a more well-rounded professional capable of handling complex tasks in the future.

Basic Qualifications

• 5+ years of experience leading, managing & developing high performance teams (up to 10 people)
• 8+ years of progressive experience within a complex, global security, audit, or vulnerability management team
• 5+ years experience with high volume workflow processes and procedures
• 5+ years experience managing incident and audit statuses through regular updates
• BA/BS in computer science, information security, or related discipline, or equivalent work experience

Preferred Qualifications

• Proven ability to drive incidents to conclusion based on SLA and severity ratings
• Strong risk-based prioritization skills in information security
• Hands-on knowledge of security design review, threat modeling, risk analysis, and testing techniques
• Experience with vulnerability remediation lifecycle
• Ability to create meaningful metrics from service ticketing systems
• Security certifications such as CISSP are encouraged
• Bias for action and ability to handle high-stress, time-sensitive tasks
• Experience managing remote team members
• Excellent written communication skills, translating complex issues into simple concepts
• Attention to detail
• Alignment with Amazon's leadership principles and technical depth requirements