Security Engineering Manager, Leo Security

About This Role

This role involves managing a team of security engineers and technical program managers focused on evaluating risks related to Amazon Leo's embedded devices and firmware. It combines long-term strategic planning to enhance enterprise security with the agility to respond to new threats, while also fostering a security culture within the organization.

Responsibilities

• Manage a team of security engineers and technical program managers
• Evaluate risks related to Amazon Leo, specifically on its embedded devices and firmware
• Identify blockers for builders
• Create metrics to demonstrate team performance
• Set the direction for a team of security professionals responsible for Amazon Leo's devices and firmware
• Drive the execution of security initiatives
• Recruit and improve processes
• Work across Amazon Security and Project Kuiper organizations to partner on solutions
• Lead a team of engineers and TPMs, building their careers and solving complex security problems
• Identify trends in findings and work with partners to remove bug classes at source
• Influence the security strategy of partner teams to optimize security outcomes for customers
• Participate in hiring, development, training, and team leadership
• Grow ownership and role within the team

Requirements

• 5+ years of managing and developing teams experience
• 5+ years of progressive work within a software security team or related operating environment experience
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
• Experience applying threat modeling or other risk identification techniques or equivalent
• Minimum of 5 years of experience in Security Engineering management
• Minimum of 5 years of experience in managing or leading engineering teams
• Strong verbal and written communications skills
• Ability to work effectively across internal and external organizations

Nice to have:

• Information security professional certification (SANS GIAC, CISSP etc.)
• Master's degree in Computer Science or a related field
• Experience managing remote team members
• 7+ years of Software Development or Software Development Management or Security Engineering Management experience
• Hands-on knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques