Opportunities in United States

Full Job Description

We are looking for an experienced security leader to join the Application Security team with a focus on Generative AI applications. As a security leader, you will manage a team of security engineers and technical program managers specializing in GenAI security, fostering a strong team culture and driving progress towards strategic goals. You should know how to prioritize, communicate clearly and compellingly, and understand how to drive a high level of focus and excellence with a strong team. Passion and discipline around cloud computing and AI/ML security is critical, as is a high level of ownership and accountability.

Amazon is continuously innovating new services and features leveraging Generative AI for our customers. Our engineers invent, build, and sometimes break things to make them easier, faster, better, and more cost-effective. However, no matter what we're building—from AI-powered customer experiences to large language model integrations, prompt engineering to model fine-tuning—security is always our top priority. The Amazon Application Security team focuses on working with our builders to provide GenAI experiences that our customers can trust. That means constantly learning new things and solving complex problems unique to AI systems to protect the safety, security, and privacy of billions of lives on a global scale.

At Amazon, you'll be working with the best minds in technology, security, and artificial intelligence. Learn and be curious here, and accelerate your career growth. You can take pride in knowing that your work is meaningful, having a positive impact on others and making the world a better place.

As a manager, you will lead application security engineers and technical program managers to solve novel security challenges that arise when Amazon builds and deploys Generative AI technologies. You'll help them develop their skills and their careers as you tackle emerging threats like prompt injection, model poisoning, data leakage, and adversarial attacks, while contributing to Amazon's overall security and privacy strategy for AI systems.

Key job responsibilities

• You will lead, manage, and develop a team of Security Engineers and Technical Program Managers responsible for Application Security (AppSec) of Amazon's Generative AI services and AI-powered applications.
• You will lead the strategic direction and evolution of GenAI Application Security review processes, including setting goals and establishing priorities for securing LLM integrations, prompt engineering workflows, and AI model deployments.
• You will set the direction for the team by driving strategic initiatives in AI security, influencing leadership, key stakeholders, and partnering with AI/ML teams throughout Amazon.
• You will develop a healthy and collaborative culture and enable the team to deliver results in the rapidly evolving GenAI security landscape.
• You will lead effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities, including data science, ML engineering, and product teams.
• You will drive improvements to internal program and process specific to GenAI security reviews, including threat modeling for AI systems, secure prompt design, and model security assessments.
• You will write and deliver high-quality documents for technical and non-technical audiences on complex GenAI security topics.
• You will drive the adoption of GenAI-specific security processes, automation, and tooling to improve operational efficiency and scale security reviews for AI applications.
• You will stay current with emerging GenAI security threats and vulnerabilities, ensuring the team maintains expertise in areas such as prompt injection prevention, model security, RAG security, and AI supply chain security.
• You will mentor and develop individual contributors, helping them grow their technical expertise and leadership capabilities.

About the team About Amazon Security

Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic Qualifications

• 5+ years of managing and developing teams experience
• Bachelor's degree in Computer Science, Information Security, or a related field
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
• Experience applying threat modeling or other risk identification techniques to traditional and AI-powered applications
• Understanding of Generative AI technologies, large language models, and AI application architectures

Preferred Qualifications

• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
• Experience with GenAI security challenges including prompt injection, model security, data privacy in AI systems, and adversarial machine learning
• Familiarity with AI/ML frameworks, LLM APIs, RAG architectures, and AI model deployment pipelines

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, WA, Seattle - 175,100.00 - 236,900.00 USD annually

5+ years of managing and developing teams experience Bachelor's degree in Computer Science, Information Security, or a related field Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security Experience applying threat modeling or other risk identification techniques to traditional and AI-powered applications Understanding of Generative AI technologies, large language models, and AI application architectures