Technical Program Manager III, AWS Security Pentesting Team

$133,900 - $231,400/Yr

Amazon - Atlanta, GA

Full-time - Mid Level

Atlanta, GA

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The AWS Security Verification and Validation Team is seeking a Security Technical Program Manager to lead the strategy and continuous improvement of quality control mechanisms within the security testing lifecycle of AWS services and systems. This role requires a deep understanding of the complex roles and responsibilities at each stage of the security testing process. The successful candidate will leverage their extensive experience to define and drive strategic outcomes, ensuring that all areas of security testing and penetration test scopes are efficient, automated, and continuously improved. In this position, the Security Technical Program Manager will be responsible for understanding key metrics that need to be measured, building dashboards to monitor trends, and creating process improvements that address root causes and deliver results. The AWS Security Verification and Validation Team is dedicated to ensuring that services and systems running on AWS maintain the highest level of security for customers. This includes proactive, retroactive, and continuous assessments for security vulnerabilities, performing penetration testing, running a Bug Bounty program, and conducting red team activities. The role is critical to the success of the security program at AWS, requiring collaboration with security engineers and other stakeholders across various time zones. The candidate will be expected to work in a data-driven environment, drive process improvements, and effectively communicate relevant data to support complex business decisions. They will create plans with measurable success criteria and anticipate gaps between teams, processes, and system architectures to optimize results for customers.

Responsibilities

• Own the strategy and continuous improvement of quality control mechanisms within the security testing lifecycle.
• Define and drive strategic outcomes for security testing processes.
• Build dashboards to monitor key metrics and trends in security testing.
• Create process improvements that address root causes of issues in security testing.
• Collaborate with security engineers and other stakeholders to support a wide range of security activities.
• Analyze systematic issues and implement solutions to complex problems.
• Communicate relevant data to support business decisions and drive recommendations effectively.
• Develop and manage interrelated security programs in a collaborative environment.

Requirements

• 5+ years of technical product or program management experience.
• 5+ years of project management experience including scope, schedule, budget, quality, risk, and critical path management.
• 5+ years of experience establishing programs and processes that improve the efficiency and efficacy of lifecycles/pipelines.

Nice-to-haves

• 5+ years of experience working directly with engineering teams.
• Demonstrated understanding of Cloud Security Foundations and Penetration Testing foundations.
• 4+ years of experience in data analytics and security metrics utilizing SQL, Tableau, QuickSight, or similar tools.
• Experience in penetration testing or pentest management.
• Experience in security architecture and program risk mitigation for enterprise services.

Benefits

• Flexible work hours and arrangements.
• Ongoing DEI events and learning experiences.
• Endless knowledge-sharing and training resources for career advancement.