Manager, Security Engineering, SEALS, Corporate Services Security (CPSS)

Lead a team of Security Engineers protecting Amazons HR and and Legal is an inherently cross-functional role working across business and technical domains; it requires a strong ability to influence others partner effectively and know where to prioritize for strategic impact.

The Corporate Services Security (CPSS) Security for Employee and Legal Systems (SEALS) team protects Amazons enterprise HR and Legal applications ensuring they meet the high security standards. Youll elevate our security strategy through broad leadership cross-functional collaboration and delivery of high-quality results that push us to continuously improve for our customers. You will set the strategic direction for the entire software development lifecycle while developing and taking your team to the next level. Ideal candidates will have an established background as an application/product security engineering manager with experience spanning threat modeling architecture reviews scanning and assessments and remediation/mitigation approaches. You will understand AI application security threats and embrace AI to scale delivery. You will combine technical leadership with managerial depth with a proven track record of aligning security with the strategies of the businesses you support and collaborating effectively with builder teams throughout the phases of the SDLC.

Key job responsibilities
- Assess security risks establish mitigation strategies and develop technical roadmaps. Partner with PXT and Legal builder teams to understand requirements and integrate security seamlessly into their work. Align with key business stakeholders to ensure that objectives are focused on areas of key concern and change; provide technical oversight for all phases of the software development lifecycle.
- Partner with peers partners customers and stakeholders to prioritize and drive implementation of security-related technical and process controls to remediate risks identified during engagements. Communicate updates to senior security and business leadership on a regular cadence.
- Hire develop and mentor security engineers and manage the day-to-day activities of the team. Create the organization of the future by driving a culture of inclusion where team members are encouraged to take risks and push limits to challenge organizational security assumptions.
- Drive security initiative planning outcomes and improvements: Participate in wider leadership across CPSS and Amazon Security functions. Establish roadmap/strategic direction for the team
- Implement success metrics reporting and processes that measure program outcomes and effectiveness.


A day in the life
- Owning and driving large-scale programs and campaigns for awareness of policy or adoption of new security mechanisms
- Using automation to scale security mechanisms across the business and minimize friction around security controls
- Conducting threat modeling sessions architecture reviews and security assessments with PXT and Legal builder teams throughout the SSDLC
- Diving deep into the control landscape and operations of corporate services with builder teams
- Owning security escalation action items and informing Senior Leadership on short medium and long-term recommendations to triage escalations and mitigate risks
- Bar raising deliverables and mentoring team members and builders


About the team
SEALS (Security for Legal and Employee Services) supports Amazons People eXperience & Technology (PXT) and Legal teams. We are the dedicated Business Security team responsible for protecting the critical systems that power Amazons workforce and legal operations. Our mission is to ensure these enterprise business applications meet the high security standards required to maintain and enhance customer trust.


- 5 years of managing and developing teams experience
- 5 years of progressive work within a software security team or related operating environment experience
- Bachelors degree in Computer Science Information Security or a related field
- Knowledge of security of web services video content protection technologies cryptography network security protocols and operating system security
- Experience in managing and developing teams
- Experience in progressive work within a software security team or related operating environment
- Experience applying threat modeling or other risk identification techniques or equivalent

- information security professional certification (SANS GIAC CISSP etc.)
- Masters degree in Computer Science or a related field
- Knowledge of information security technologies such as security design review threat modeling risk analysis and software testing techniques
- Experience managing remote team members

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at WA Seattle - 175100.00 - 236900.00 USD annually