POSTED Mar 19
AWS Security Technical Program Manager, AppSec Vendor Security
at Amazon ⋅ US, WA, Seattle
Can you adapt to a fast-paced environment supporting projects across all parts of Amazon Web Services rapid evolving businesses? AWS Security manages risks of all the global external party engagements for AWS. AWS Security needs Security Technical Program Managers who can manage risk and drive business success. Come join a world-class security organization that is rapidly evolving the cloud services world.
AWS Security is working on cutting edge solutions in partnership with vendors that involve a wide variety of technologies including cloud services, identity and access management, machine learning, mobile devices, and custom hardware — all operating at massive scale.
AWS is seeking an independent, passionate, and deeply experienced professional to help lead the overall security direction of global vendor engagements. This role will provide thought leadership, portfolio management, and technical guidance for the security direction of our external party risk management program. This guidance will involve areas of customer support, access management, secure network configurations, and the security around tools used to support both operations and management of AWS engagements with technology vendors. The ideal candidate should be a technically experienced and innovative security professional who is able to communicate these across technical teams and at executive levels. The candidate should have the ability to handle a wide range of security requirements and can translate those requirements into operational processes and procedures for cloud computing.
The position will be responsible for coordinating the security reviews of external party engagements to highlight areas of interest, flag opportunities for stronger security practices, and facilitating discussions with our leadership to address our security direction. If you enjoy working in an environment with rapidly changing threat scenarios on the cutting edge of information security, this position will provide you with a challenging opportunity.
You will be expected to be strong in multiple domains and provide significant contributions to the AWS Security team and to multiple client groups throughout Amazon Web Services. You will develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. You will mentor junior security professionals and be a security thought leader for the organization. Similarly, our highly collaborative team is committed to each team member’s growth as our business grows. You will have the opportunity to learn from, and be mentored by, those who are building and securing AWS's cutting-edge services.
You will need a combination of technical and communication skills, as well as the ability to both lead projects, generate security metrics, and perform risk reviews of project proposals. This role will provide career growth opportunities as the technical program managers to gain new security skills in the course of your duties and working with fellow world-class technologists.
Note: This role requires you to support teams in APJC time zones and will require working hours that align with APJC region, such as 12pm-8pm Pacific Time.
Key job responsibilities
- Manage security reviews and processes to qualify AWS vendors worldwide and validate the effectiveness of durable technical security controls specific to the use case
- Identify technical risks and implement security programs and processes to offer mitigations
- Drive organization-wide security initiatives, get buy in from stakeholders, and deliver quantifiable results
- Develop, maintain and prepare metric reports for senior management on the state of the security program
A day in the life
The daily work of a TPM II on this team will perform deep dive technical analysis on third party engagement requests across the AWS organization to upload the Amazon Security Bar. A TPM will develop and maintain technical runbooks to scale third party reviews for a wide range of technologies and security knowledge domain areas, including server hardware, AI/ML, quantum computing, telecommunications, and infrastructure supply chain. Additionally a TPM relentlessly finds opportunities to scale their knowledge and capabilities across the team through developing runbooks, while also providing visibility on program health to leadership through BI reporting.
About the team
We are a team of highly technical security practitioners, most with backgrounds in pen testing, incident response, security audit, and other hands-on technical experience. We leverage our collective knowledge to uphold the Amazon Security Bar through helping our customers properly think through their service secure system design, data sharing mechanisms, and long term service ownership strategies.
We work in a fast paced environment where all members help each other and jump in when needed, regardless of the assigned business vertical.
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training and Career growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
We are open to hiring candidates to work out of one of the following locations:
Seattle, WA, USA
AWS Security is working on cutting edge solutions in partnership with vendors that involve a wide variety of technologies including cloud services, identity and access management, machine learning, mobile devices, and custom hardware — all operating at massive scale.
AWS is seeking an independent, passionate, and deeply experienced professional to help lead the overall security direction of global vendor engagements. This role will provide thought leadership, portfolio management, and technical guidance for the security direction of our external party risk management program. This guidance will involve areas of customer support, access management, secure network configurations, and the security around tools used to support both operations and management of AWS engagements with technology vendors. The ideal candidate should be a technically experienced and innovative security professional who is able to communicate these across technical teams and at executive levels. The candidate should have the ability to handle a wide range of security requirements and can translate those requirements into operational processes and procedures for cloud computing.
The position will be responsible for coordinating the security reviews of external party engagements to highlight areas of interest, flag opportunities for stronger security practices, and facilitating discussions with our leadership to address our security direction. If you enjoy working in an environment with rapidly changing threat scenarios on the cutting edge of information security, this position will provide you with a challenging opportunity.
You will be expected to be strong in multiple domains and provide significant contributions to the AWS Security team and to multiple client groups throughout Amazon Web Services. You will develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. You will mentor junior security professionals and be a security thought leader for the organization. Similarly, our highly collaborative team is committed to each team member’s growth as our business grows. You will have the opportunity to learn from, and be mentored by, those who are building and securing AWS's cutting-edge services.
You will need a combination of technical and communication skills, as well as the ability to both lead projects, generate security metrics, and perform risk reviews of project proposals. This role will provide career growth opportunities as the technical program managers to gain new security skills in the course of your duties and working with fellow world-class technologists.
Note: This role requires you to support teams in APJC time zones and will require working hours that align with APJC region, such as 12pm-8pm Pacific Time.
Key job responsibilities
- Manage security reviews and processes to qualify AWS vendors worldwide and validate the effectiveness of durable technical security controls specific to the use case
- Identify technical risks and implement security programs and processes to offer mitigations
- Drive organization-wide security initiatives, get buy in from stakeholders, and deliver quantifiable results
- Develop, maintain and prepare metric reports for senior management on the state of the security program
A day in the life
The daily work of a TPM II on this team will perform deep dive technical analysis on third party engagement requests across the AWS organization to upload the Amazon Security Bar. A TPM will develop and maintain technical runbooks to scale third party reviews for a wide range of technologies and security knowledge domain areas, including server hardware, AI/ML, quantum computing, telecommunications, and infrastructure supply chain. Additionally a TPM relentlessly finds opportunities to scale their knowledge and capabilities across the team through developing runbooks, while also providing visibility on program health to leadership through BI reporting.
About the team
We are a team of highly technical security practitioners, most with backgrounds in pen testing, incident response, security audit, and other hands-on technical experience. We leverage our collective knowledge to uphold the Amazon Security Bar through helping our customers properly think through their service secure system design, data sharing mechanisms, and long term service ownership strategies.
We work in a fast paced environment where all members help each other and jump in when needed, regardless of the assigned business vertical.
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training and Career growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
We are open to hiring candidates to work out of one of the following locations:
Seattle, WA, USA