Software Development Manager, AWS Vulnerability Management - Automated Remediation, AWS Vulnerability Management

At Amazon Web Services (AWS), Security is our highest priority. The AWS Security team is responsible for the security of services offered by AWS. The AWS Vulnerability Management team is responsible for driving innovative enhancements that raise the bar for how Amazon Builders discover, prioritize, and remediate vulnerabilities across their resources, systems, and data. At AWS' scale, we must invent new security capabilities that let Builders move fast while vulnerabilities are resolved quickly, with minimal manual effort.

The successful candidate loves working with engineering and business teams across the AWS Security organization to understand their needs, and partners with software and security engineers to design and build the automation that makes remediation effortless for Builders. You are passionate about eliminating manual toil and you want to solve real security problems at scale. You think in terms of capabilities that detect, decide, and act, so that the work in front of a Builder shrinks to a single click or disappears entirely.

As a Software Development Manager you will own the capabilities that power touchless remediation for Amazon Builders: the strategy, the goals, the requirements, and the mechanisms that deliver them. You will own the systems that apply AI and automated response actions at machine speed, closing the gap between detection and resolution so that Builders can remediate in minutes rather than days or weeks. You will partner with Engineering, TPMs, and cross-functional teams to equip Builders across the organization with automation that reduces their security work to the smallest possible action. You will own the delivery of industry-leading capabilities that combine descriptive and predictive analytics with security engineering, automating the complex work behind remediation and producing insights for our Builders and our customers.

One of the central challenges you will own is continuing to transform vulnerability remediation so that time to remediation drops to minutes. You will push the boundaries of what automation can do, building capabilities that generate ready-to-ship fixes, safely apply automated response actions at machine speed, and progressively expand the scope of findings that can be resolved with little or no manual effort, all while holding the safety, correctness, and trust bar that Amazon's scale demands. Builders stay accountable for their resources, but the capabilities you own make resolving a finding fast, safe, and nearly effortless.

You will need a deeply analytical and systems architecture mindset with the ability to tackle complex and ambiguous challenges and effectively influence stakeholders across the AWS Security organization. This is a high-impact and high-visibility role that requires not only strategic vision and inventing on behalf of customers, but also strong execution, technical depth, analytical rigor, and excellent communication.

Key job responsibilities

Own and build a best-in-class engineering team that delivers excellent results through rapid iterations

Own the design and development of state-of-the-art capabilities for touchless remediation, applying AI and automated response actions at machine speed

Own the capabilities that bring time to remediation down to minutes, continuing to transform remediation into safe, automated mechanisms Builders can trust

Own engineering and operational excellence through metrics and continuous learning

Own the long-term strategy for your programs and translate it into a roadmap and action plan

Report on the status of development, quality, operations, and system performance to management

Mentor and grow high-performing SDEs and security engineers to take on increasingly higher responsibilities

A day in the life

A high-severity vulnerability surfaces across thousands of Builder-owned resources, and the capabilities your team owns go to work before anyone opens a ticket. You watch the automation detect, decide, and act: generating validated fixes, applying automated response actions at machine speed, and resolving findings in minutes. By the time your coffee is cold, most of them are already closed, and you are digging into the handful that need a human eye.

Later you are working with an AWS engineering team that wants to bring a new class of findings into automated remediation. You have already mapped how a fix could go wrong at scale, so you set the safety and correctness bar the automation has to clear before it can act on a Builder's behalf. In the afternoon you throw a simulated failure at the detection-to-remediation automation, find the gap it misses, prove it, and hand a validated design to an SDE to close it.

About the team

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic qualifications

- 3+ years of engineering team management experience

- 5+ years of Software Engineer, Software Developer, or related occupational experience

- 8+ years of providing technical leadership and project management for all aspects of the software development lifecycle experience

- Knowledge of engineering practices and patterns for the full software/hardware/networks development life cycle, including coding standards, code reviews, source control management, build processes, testing, certification, and livesite operations

- Bachelor's degree or foreign equivalent in Computer Science, Engineering, Mathematics, or a related field

Preferred qualifications

- Experience in communicating with users, other technical teams, and senior leadership to collect requirements, describe software product features, technical designs, and product strategy

- 2+ years of leading development of applications backed by AWS services or using other cloud based technologies and services experience

- 1+ years of developing large-scale, multi-tiered distributed software systems using service-oriented architecture experience

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 184,900.00 - 250,200.00 USD annually