Sr. Security Engineering Manager, Customer Service Security

About This Role

This role involves leading a team that designs, implements, and operates security solutions for Amazon's Customer Service Associates worldwide. The manager will secure the entire technology stack, from device firmware to cloud-scale data processing, within a DevSecOps organization. It suits a leader focused on identifying and eliminating security risks, defining security posture, and collaborating with development and operations teams to embed security at every layer of delivery.

Responsibilities

• Independently manage a two-pizza team of engineers
• Develop engineers' careers and foster a culture of security ownership and inclusivity
• Build and own mechanisms that identify risks across the technology stack and drive them to resolution
• Be the primary voice of security in the development process, partnering with development and operations teams
• Ensure security is embedded from design through deployment
• Be involved in three-year planning, annual planning, and business updates
• Interact with other engineering managers and their teams, data professionals, and product and program teams
• Build cohesive strategies to secure Customer Service's endpoints
• Work with directs day in and day out, helping them solve problems, grow their security expertise, and advance their careers
• Continuously assess where risk exists in the stack, and drive the team to close gaps in visibility and control
• Meet with the leadership team at least weekly to discuss security risks and resolutions
• Interact with senior leadership to make plans and review CS Security-wide initiatives, representing the team's security posture and communicating risk clearly

Requirements

• 10+ years of industry work with hands-on security engineering experience
• 10+ years of risk assessment and enabling organizations making security decisions experience
• 10+ years of team management and building (including coaching and mentoring) experience
• 10+ years of communicating technical concepts to a non-technical audience experience
• Bachelor's degree in Computer Science or a related field
• Experience communicating technical concepts to a non-technical audience
• Experience with hands-on security engineering
• Experience in risk assessment and enabling organizations to make security decisions
• Experience in team management and building (including coaching and mentoring)

Nice to have:

• Knowledge of information security risk-based prioritization
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques