Security Engineering Manager, Infrastructure Boundary Protection

Quick Facts

• Role: Security Engineering Manager (Infrastructure Boundary Protection)

Description

Lead initiatives that protect AWS’s operational network across the full device lifecycle—from provisioning through decommissioning. Manage a team responsible for network access controls, vulnerability management, and security validation at global scale, driving AI/ML-enabled detection and automated configuration validation. Own end-to-end security validation processes and raise the bar for network security through continuous improvement and cross-functional partnership.

Responsibilities

• Lead and develop security engineers focused on network boundary protection, access controls, and vulnerability management

• Define and execute a strategic vision for securing the operational network (provisioning to decommissioning)

• Drive adoption of AI/ML security solutions (anomaly detection, automated reasoning, exposure identification)

• Own end-to-end security validation processes to enforce access protection policies at scale

• Partner cross-functionally to identify gaps, reduce risk, and increase the security bar

• Establish and track operational metrics for effectiveness, threat detection coverage, and incident response readiness

• Recruit, mentor, and retain talent; foster ownership, innovation, and operational excellence

• Communicate security posture, risks, and priorities to senior leadership

• Champion continuous improvement via automation, tooling, and process optimization

Benefits

• Health insurance (medical, dental, vision, prescription) and life/AD&D coverage; Supplemental life options

• EAP and mental health support; Medical Advice Line

• Flexible Spending Accounts; adoption and surrogacy reimbursement coverage

• 401(k) matching

• Paid time off and parental leave

Requirements

• 5+ years managing and developing teams

• 5+ years progressive work in a software security team or related operating environment

• Bachelor’s degree in Computer Science, Information Security, or related field

• Knowledge of security of web services, cryptography, network security protocols, and operating system security

• Experience applying threat modeling or other risk identification techniques