Manager, Security Engineering, Healthcare Security

About the role

Amazon Healthcare Security (HealthSec) is developing a patient-centric healthcare experience that is personal, transparent, and convenient. We are looking for a Senior Manager to lead a security engineering team. As a Security Engineering Manager, your responsibility is to lead a team that ensures HealthSec customer data, devices, and systems are secure, resilient, and compliant. Your team is part of a global organization of security engineers, software developers, and technical program managers dedicated to continuously raising the security bar. We operate with an AI First mindset, leveraging generative AI and machine learning to scale security decisions, automate defenses, and move faster than emerging threats. You will own the strategy, execution, and health of your team while developing the next generation of security leaders. A Manager at this level is both a people leader and a recognized security practitioner, a trusted advisor on complex technical issues who can guide the team through the most challenging security problems. You must demonstrate sound judgment in making trade-offs between short and long-term security and business goals, show resilience, and navigate difficult situations with composure and tact. You will make risk-based assessments founded on data and facts, deliver results under uncertainty, and influence direction across multiple teams and organizations.

Responsibilities

• Lead, mentor, and grow a team of security engineers, owning hiring, performance management, career development, and succession planning
• Set the vision and multi-quarter roadmap for the team, balancing security outcomes with business priorities and the organization's risk posture
• Guide the team on security architecture reviews, threat modeling, secure design, and incident response for large-scale distributed systems handling protected health information (PHI)
• Champion an AI First approach, driving the team to apply generative AI, machine learning, and automation to scale threat detection, accelerate security reviews, and reduce manual toil, while managing the security and privacy risks that AI systems themselves introduce
• Ensure the team's work meets or exceeds healthcare regulatory and compliance requirements (e.g., HIPAA), and support internal and external audits
• Drive risk-based decision-making founded on data and facts, and deliver results under uncertainty and ambiguity
• Partner with software development, product, clinical, and compliance teams to embed sound security decisions early and often, minimizing security trade-offs
• Champion a culture of security, customer trust, ownership, and continuous learning across the organization
• Influence security strategy and direction across multiple teams and organizations, and represent the team in reviews, planning cycles, and executive updates

Qualifications

• Bachelor's degree in Computer Science or a related field
• 5+ years of experience in application security, security engineering, or a related security discipline
• 3+ years of people management experience, including hiring and developing engineers
• Knowledge of HTTP(S), DNS, TCP/IP and programming experience in Java, C++, Python, or a related language
• Demonstrated experience leading security architecture reviews, threat modeling, and security design for large-scale distributed systems
• Experience in application security architecture, code reviews, security testing, incident response, or security infrastructure

Preferred qualifications

• Experience in healthcare or regulated-industry security environments and with AWS products and services
• Experience applying generative AI, machine learning, or automation to security workflows, and familiarity with securing AI/ML systems
• Experience with threat modeling, secure coding, identity management, authentication, cryptography, system administration, or network security
• Demonstrated ability to influence security strategy and direction across multiple teams or organizations
• Proven track record mentoring, developing, and promoting security engineers
• Complex problem solving on tight schedules and risk-based assessments using data and facts

About the team

The Amazon Healthcare Security (HealthSec) team safeguards the data, devices, and systems at the core of Amazon's healthcare business. We own the security of highly sensitive, protected health information (PHI) and the trust that patients and customers place in us. We are an AI First team: we embed security and privacy by design, partner with builders early and often to prevent issues before they ship and apply generative AI and automation to scale threat detection, accelerate security reviews, and stay ahead of a fast-evolving threat landscape. We operate with urgency and rigor, hold ourselves to a bar that meets or exceeds the strictest regulatory requirements, and measure our success by reducing real risk to patients and customers.

Benefits

• Health insurance (medical, dental, vision, prescription)
• Basic Life & AD&D insurance and option for Supplemental life plans
• EAP, Mental Health Support, Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments and restricted stock units (RSUs)

Pay

USA, WA, Seattle: $175,100.00 - $236,900.00 USD annually. Final compensation will be determined based on factors including experience, qualifications, and location.

This response is AI-generated, for reference only.