Penetration Testing Manager, Devices & Services Penetration Testing

$157,600 - $272,400/Yr

Amazon

Full-time - Mid Level

10,001+ employees

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The Penetration Testing Manager will lead a team dedicated to identifying and exploiting vulnerabilities in Amazon's consumer devices and services. This role involves managing complex penetration testing projects, driving strategic initiatives, and collaborating with various teams to enhance security measures. The manager will focus on technical leadership, team development, and maintaining high security standards across Amazon's diverse product offerings.

Responsibilities

• Lead, manage, and develop a high-performing Penetration Testing Team across multiple locations
• Manage and coordinate complex penetration testing projects involving multiple penetration testers, technology stacks, and development teams
• Lead the strategic direction and evolution of the Penetration Testing Team, including setting goals and establishing priorities
• Drive strategic initiatives by influencing leadership, key stakeholders, and partnering with teams throughout Amazon
• Lead effective teamwork, communication, collaboration, and commitment across multiple disparate groups with competing priorities
• Lead improvements to internal program and process
• Write and deliver high-quality documents for technical and non-technical audiences

Requirements

• 3+ years experience in a technical security leadership (people manager) role
• 5+ years of experience in Information Security related domains, with knowledge of security fundamentals, application vulnerabilities, application attack vectors, penetration testing methodologies, and tools
• 3+ years of experience driving Information Security initiatives across large diverse organizations
• Experience communicating with a wide range of technical & non-technical partners and senior leadership
• BA/BS in Computer Science or 4+ years of related experience

Nice-to-haves

• Ability to exercise sound judgement, problem solve, and make decisions in the face of ambiguity and imperfect knowledge
• Ability to write effective communications with sharp analytical abilities and attention to detail
• Ability to handle multiple competing priorities and deliver results in a fast-paced, deadline-driven environment
• Experience gathering and reporting metrics to measure service and program effectiveness and consistency
• Understanding of and experience in pentesting the embedded devices ecosystem including operating systems, Firmware, Bootloaders, Bluetooth, WiFi, Web service APIs, etc.
• Experience with cloud service providers and their offerings, preferably AWS, and its various technologies and services
• Experience designing and reviewing secure system architectures through the use of Threat Modeling incorporating sophisticated and modern attacks

Benefits

• Flexible work hours and arrangements
• Training and career growth opportunities
• Diversity and inclusion initiatives
• Work-life balance support