Manager, Red Team, Bots & DDoS Threat Intelligence

Key job responsibilities

• Recruit, mentor, and grow a team of offensive security engineers
• Plan and run intelligence-driven red team operations targeting bot detection platforms, WAFs, CDN protections, and DDoS mitigation services; develop custom tooling for anti-detect browser automation, TLS fingerprint manipulation, and behavioral replay
• Identify and simulate emerging AI-driven attack vectors including autonomous browsing agents, LLM-powered bots, agentic scraping before they become widespread, keeping Amazon's defenses ahead of the curve
• Establish workflows with bot detection engineering teams to translate offensive findings into measurable defensive improvements
• Report findings as executive summaries for senior leadership in business risk language and detailed technical breakdowns for engineering teams to drive remediation

Basic Qualifications

• 5+ years of managing and developing teams experience
• 5+ years of progressive work within a software security team or related operating environment experience
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
• Experience applying threat modeling or other risk identification techniques or equivalent

Preferred Qualifications

• Experience managing remote team members
• 3+ years of experience in offensive security (red teaming, adversary simulation, penetration testing)
• Experience conducting or managing DDoS simulation testing at scale
• Experience with anti-detect browser frameworks (Nodriver, Puppeteer Stealth variants), TLS fingerprint spoofing, Canvas/WebGL evasion techniques