Security Engineering Manager, Security Analytics and AI Research

Amazon Web Services is looking for an experienced Security Engineering Manager to join the Security Analytics and AI Research group within AWS Security Services. This group is entrusted with researching and developing core detection and machine learning algorithms for services such as AWS GuardDuty (https://aws.amazon.com/guardduty/) and AWS Security Hub (https://aws.amazon.com/security-hub/). On this team, you will lead engineers to invent and implement innovative solutions for never-before-solved problems. If you have experience with information security and a passion for large scale threat detection systems, this will be an exciting opportunity. This is an advanced engineering team that is using novel techniques to help customers detect and respond to threats across their cloud workloads.
This role will specifically lead the security engineering team associated to GuardDuty, a service which continuously monitors AWS accounts and workloads for malicious activity using machine learning, anomaly detection, and threat intelligence. This role will collaborate closely with applied scientists and partner engineer teams to continuously improve threat detection across multiple data domains — including CloudTrail analytics, runtime monitoring, network traffic analysis, and AI workload protection. GuardDuty produces security findings aligned to the MITRE ATT&CK and ATLAS frameworks, therefore this role will also support the organization in advancing detection coverage and reducing false positives at scale.
The AWS Security Services team builds technologies that help customers strengthen their security posture and better meet security requirements in the AWS Cloud. We are building massively scalable and globally distributed security systems to power next generation services.

Key job responsibilities
Lead and develop a team of security experts building novel detection solutions at AWS scale
Own the security value of GuardDuty detections, leading operational reviews and prioritizing improvement opportunities
Collaborate with science and engineering teams to deliver detections to production across runtime, network, CloudTrail, and AI protection domains
Stay up to date with the ever changing cloud security and threat landscape, including emerging threats targeting agentic AI applications
Work backwards from our customers to drive product roadmaps and detection coverage improvements
Drive detection engineering best practices including attack simulation, security value evaluation, and coverage measurement

About the team
Security Analytics and AI Research (SAAR) The AWS SAAR team's mission is to provide security value to our customers by inventing and innovating at the intersection of information security and AI. We aim to bridge the gap between information security and AI by bringing together domain expertise from both sides. Our solutions reach to our customers through various AWS Security Services. We are a group of AI researchers and security engineers under AWS Security Services focusing on information security problems. We come from different backgrounds and we all have passion for security. We often work on never-before-solved problems and strive for advancing the state of the art.
Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that's why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.
Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve in the cloud.
Inclusive Team Culture Here at AWS, it's in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.
Mentorship & Career Growth We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. - 3+ years of engineering team management experience
- Bachelor's degree in computer science or equivalent
- 7+ years working in security research and engineering
- Experience with developing products
- Experience in one or more of cloud security, threat intelligence, malware detection, network security, and related fields - Experience with AWS products and services
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience in threat detection engineering, including writing detection rules and managing false positive/negative tradeoffs at scale
- Experience with runtime security, network traffic analysis, or AI/ML workload protection
- Experience managing a team implementing security solutions at the business division level or equivalent
- Familiarity with MITRE ATT&CK and ATLAS frameworks

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, WA, Seattle - 175,100.00 - 236,900.00 USD annually