AWS Security is working on innovative solutions in partnership with vendors that offer a wide variety of technologies including cloud services, identity and access management, machine learning, mobile devices, and custom hardware — all operating at massive scale.
AWS is seeking an independent, passionate, and experienced professional to support the overall security direction of global vendor engagements. With consistent support from their manager and senior peers, this role will provide thought leadership, portfolio management, and technical guidance for the security direction of our vendor risk management program. The ideal candidate should be a technical professional who is able to use data effectively, automate processes, and communicate across technical teams and at executive levels. The candidate should have familiarity with technical security fundamentals and be able to translate requirements into operational processes and procedures for cloud computing.
The position will be responsible for driving operational goals using data-driven analysis, using automation to get results, and engaging across AWS Security teams to provide key performance indicators to force multiply our security processes. If you enjoy working in an environment with rapidly changing threat scenarios on the forefront of information security, this position will provide you with a challenging opportunity.
You will be expected to be strong in multiple domains and provide significant contributions to the AWS Security team and to multiple client groups throughout Amazon. You will develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. Similarly, our highly collaborative team is committed to each team member’s growth as our business grows. You will have the opportunity to learn from, and be mentored by, those who are building and securing AWS's industry-leading services.
You will need a combination of technical and communication skills, as well as the ability to both lead projects, generate security metrics, and perform risk reviews of project proposals. This role will provide career growth opportunities as a technical program manager to gain new security skills in the course of your duties and working with fellow world-class technologists.
Key job responsibilities
1. Manage security reviews and processes to qualify AWS vendors worldwide and validate the effectiveness of durable technical security controls specific to the use case.
2. Identify technical risks and work with Security Engineers and senior TPMs to implement security programs and processes to offer mitigations.
3. Drive team-wide security initiatives by getting buy in from managers and peers to deliver quantifiable results.
4. Develop, maintain and prepare metric reports for senior management on the state of the security program.
A day in the life
On a typical day, this role will
- Perform security assessments of third-party services, identify risks to AWS data, and support customer efforts to mitigate those risks to the Amazon Security Bar
- Build and monitor operational security metrics to provide focus and force multiply the team
- Build automation and scalable process mechanisms to drive operational outcomes across security workstreams
- Drive special projects to optimize security review processes
Additionally a TPM relentlessly finds opportunities to scale their knowledge and capabilities across the team through developing runbooks, while also providing visibility on program health to leadership through BI reporting.
About the team
We are a team of highly technical security practitioners, most with backgrounds in pen testing, incident response, security audit, and other hands-on technical experience. We leverage our collective knowledge to uphold the Amazon Security Bar by helping our customers properly think through their service secure system design, data sharing mechanisms, and long term service ownership strategies.
We work in a fast paced environment where all members help each other and jump in when needed, regardless of the assigned business vertical.
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training and Career growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
BASIC QUALIFICATIONS
- Knowledge of project management tools and software
- Knowledge of software development and project management concepts
- Foundational knowledge on cyber security threats, risks and mitigations for enterprise and web systems
PREFERRED QUALIFICATIONS
- Experience managing programs across cross functional teams, building processes and coordinating release schedules
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.