{"id":4107256,"url":"https://alion.io/job/amazon-head-of-security","title":"Head of Security","company":{"id":19,"name":"Amazon","domain":"amazon.com","url":"https://alion.io/company/amazon","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":78,"open_postings":4525,"ghost_share":0,"stale_share":0.887,"repost_share":0.003,"time_to_fill_p50_days":30,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-11T22:35:00Z","employer_posted_date":null,"last_verified_at":"2026-11-11T22:35:00Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"The candidate will have responsibilities across the following functions:\n\nApplication Security: \nOwn and manage the secure SDLC, including threat modelling, security design reviews, and secure coding standards.\nIntegrate security tools into CI/CD pipelines, including SAST, DAST, SCA, secrets scanning, and Infrastructure-as-Code (IaC) scanning.\nLead product vulnerability management, including vulnerability triage, remediation SLAs, penetration testing, and responsible disclosure programs.\nEnsure security across multi-tenant SaaS platforms, covering tenant isolation, authentication, authorisation, API security, and data protection.\nSecure AI and LLM-based features against prompt injection, data leakage, and model-related risks.\nCollaborate with engineering leaders to integrate security practices into development workflows.\nSupport SOC 2 and ISO 27001 compliance requirements and customer security reviews in coordination with the GRC team.\n\nSecurity Operations and Incident Response: \nLead the in-house Security Operations Centre (SOC) team and manage external MDR partnerships, including service scope and SLAs.\nOversee 24/7 security monitoring, alert triage, escalation, and incident response operations.\nLead detection engineering, including SIEM and EDR tools, logging strategies, detection rules, and alert optimisation.\nDevelop and maintain incident response playbooks, severity levels, on-call processes, and post-incident review procedures.\nLead security incidents from detection and containment through eradication, recovery, and customer or regulatory notifications.\nConduct regular tabletop exercises, red team assessments, and purple team drills.\nManage threat intelligence and threat-hunting activities across cloud, corporate, and product environments.\n\nCorporate Security: \nOversee corporate IT security, including identity and access management, SSO, MFA, device management, endpoint protection, and email security.\n\nRequirements: \n6+ years of experience in cybersecurity or information security.\nProven experience leading responses to high-severity security incidents, including data breaches, ransomware, account takeovers, cloud compromises, and critical vulnerabilities.\nStrong application security experience, including building secure SDLC programs within SaaS environments and conducting architecture and code reviews.\nExperience managing in-house SOC teams and external MDR/MSSP providers, including SLA management.\nStrong knowledge of SIEM, SOAR, EDR/XDR, and cloud-native security monitoring tools.\nHands-on experience with cloud security, preferably AWS, including GuardDuty, CloudTrail, and Security Hub.\nExperience securing corporate IT infrastructure, identity systems, and endpoint environments.\nWorking knowledge of MITRE ATT and CK, OWASP Top 10, OWASP ASVS, and NIST incident response guidelines.\nStrong incident management, communication, and stakeholder management skills, with the ability to brief both technical teams and executive leadership.\nAbility to remain calm and make effective decisions during critical security incidents.\n\nNice to Have: \nExperience working in B2B SaaS, cybersecurity, or compliance-focused organisations.\nRelevant certifications such as GCIH, GCIA, OSCP, OSWE, or CISSP.\nKnowledge of digital forensics and investigation techniques.\nExperience securing AI- and LLM-based products.\nSkills\nEDR, Incident Response, SIEM, SOAR, SOC, Security, XDR","description_format":"text","description_chars":3416,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Advertising","Cloud Platforms (IaaS & PaaS)","Logistics","Streaming & OTT Platforms"],"lifecycle":[{"event":"open","at":"2026-11-11T22:35:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":31,"reasons":["seen:0","win:early","comp:brand"],"computed_at":"2026-11-12T03:40:42Z"},"pay":null,"html_url":"https://alion.io/job/amazon-head-of-security","json_url":"https://alion.io/job/amazon-head-of-security.json","meta":{"generated_at":"2026-11-12T03:40:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7988,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19},"rest":"https://alion.io/mcp/rest/get_company?id=19"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famazon-head-of-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famazon-head-of-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famazon-head-of-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amazon-head-of-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famazon-head-of-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4107256}},{"tool":"search_jobs","arguments":{"company":"amazon.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4107256},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}