Security Engineering Manager, Customer Service Security

Do you want to secure Amazon's most customer-centric experiences? As a leader on the Endpoint Security Team, you'll manage engineers who design, implement, and operate security solutions integral to how Amazon's Customer Service Associates worldwide interact with customers every day.

About the role

You will lead a team responsible for securing the entire technology stack—from device firmware to cloud-scale data processing—within a DevSecOps organization. Your primary responsibility is identifying security risks and driving them to zero. You will define the security posture for your organization, establish gaps in visibility and control, and own the strategy to close them. You will collaborate with development and operations teams across Amazon to embed security in every layer of delivery, continuously raising the bar while enabling Customer Service to move fast and innovate. You will play a critical role in securing every interaction where Customer Service personnel access and handle customer data, obsessing over the CSA-to-customer experience.

Responsibilities

• Independently manage a two-pizza team of engineers, develop their careers, and foster a culture of security ownership and inclusivity.
• Build and own mechanisms that identify risks across the technology stack and drive them to resolution.
• Serve as the primary voice of security in the development process, partnering with development and operations teams to embed security from design through deployment.
• Participate in three-year planning, annual planning, and business updates to communicate team plans and progress.
• Collaborate with engineering managers, data professionals, and product and program teams to build cohesive strategies for securing Customer Service endpoints.
• Continuously assess security risks in the stack and drive your team to close gaps in visibility and control.
• Meet regularly with leadership to discuss the biggest security risks and how the team is addressing them.
• Represent your team’s security posture and communicate risk clearly to senior leadership during planning and initiative reviews.

About the team

We are a dispersed team primarily located in Seattle, Toronto, and Austin. As a security team responsible for products used daily by Customer Service, we balance security with usability, recognizing that the most secure products can also be the most usable. Due to the complex nature of Customer Service, we invest in flexible, agile solutions to meet an ever-changing business and security landscape.

Qualifications

• 10+ years of industry experience with hands-on security engineering.
• 10+ years of experience in risk assessment and enabling organizations to make security decisions.
• 10+ years of team management and building, including coaching and mentoring.
• 10+ years of experience communicating technical concepts to a non-technical audience.
• Bachelor's degree in Computer Science or a related field.
• Hands-on experience with security engineering, risk assessment, and team leadership.

Preferred Qualifications

• Knowledge of information security risk-based prioritization.
• Experience with security technologies such as security design review, threat modeling, risk analysis, and software testing techniques.
• Experience applying threat modeling or other risk identification techniques.
• Experience architecting, securing, and operating Amazon Web Services.

Benefits

Amazon offers comprehensive benefits including:

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D, and optional supplemental life plans).
• Employee Assistance Program (EAP) and mental health support.
• Medical Advice Line and Flexible Spending Accounts.
• Adoption and surrogacy reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.
• Sign-on payments and restricted stock units (RSUs).

Pay

Base salary range for this position: $208,300 - $281,800 USD annually (Seattle, WA). Final compensation will be determined based on experience, qualifications, and location.