empty

Program Manager I, Offensive Security Penetration Testing

Amazon

Job Description

Posted on: 
November 18, 2024

Summary and company overview

Summary Information about the Role

Amazon's Offensive Security, Penetration Testing Team is seeking a Program Manager (PM) to help keep Amazon's applications and services secure for its customers. This team is responsible for attacking Amazon's services, applications, and websites; and partnering with service teams to remediate weaknesses and sharpen our software development lifecycle. You will be challenged with opportunities, both technologically and as a leader, but will also be a great deal of fun if hacking Amazon sounds exciting to you. You will be in direct contact with teams in a variety of business verticals, giving you first hand knowledge about how Amazon is built and how it operates. Additionally, you will leverage the knowledge you gain about Amazon to find new ways to drive improvements to services, processes, and programs throughout the company.

Covering a broad range of work, this role is focused on managing and driving the penetration testing team's programs, operations, and initiatives by influencing key stakeholders and partnering with teams throughout Amazon to enable the implementation of innovative security solutions and controls to improve Amazon's security posture. You'll be using your program and project management skills to continually improve and mature the program, orchestrate penetration testing engagements, and manage third-party vendors and budgets in order to maintain and raise Amazon's high security bar. You'll be backed up by a team of highly-skilled security engineers, all working with a singular focus of maintaining our customer's trust.

A person in this role must show exemplary judgment in making trade-offs between short-term fixes and long-term security and business goals. They must also demonstrate resilience and navigate ambiguous situations with composure and tact. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Amazon and its customers secure.

Company Overview

About Amazon Security:

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Inclusive Team Culture

In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training and Career growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Responsibilities

  • Manage all penetration testing engagement scheduling needs across internal and third-party vendor resources
  • Manage the full life-cycle of penetration testing engagements
  • Manage and coordinate third-party vendors and associated budgeting
  • Lead the effective and efficient delivery of large, complex projects
  • Track metrics and delivery against program goals and implement proposals to improve program services, efficiency, and consistency
  • Drive team initiatives by influencing key stakeholders and partnering with teams throughout Amazon
  • Collaborate and communicate with leadership, partner teams, and service owners
  • Drive internal program and process improvements
  • Drive effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities
  • This role will be required to perform scheduling of penetration testing engagements. This includes coordinating with internal and external stakeholders to determine and track resource availability, responding to dynamic changes requiring schedule updates, and working across a variety of system platforms and program management objectives. Some additional responsibilities will be to manage escalations, coordinate between vendor resources, and ensure quality standards are maintained.

Job Requirements

Required Qualifications

  • 2+ years of program or project management experience
  • 2+ years of defining and implementing process improvement initiatives using data and metrics experience
  • Experience using data and metrics to determine and drive improvements
  • Experience working cross functionally with tech and non-tech teams

Preferred Qualifications

  • Knowledge of Excel at an intermediate level (e.g., pivot tables & charts, multiple criteria lookups, nested logical/IF formulas, data cleansing, array formulas, etc.)
  • Experience in a highly analytical, results-oriented environment with cross functional interactions
  • 2+ years of driving end to end delivery, and communicating results to senior leadership experience
  • 2+ years of driving process improvements experience
  • Experience in stakeholder management, dealing with multiple stakeholders at varied levels of the organization
  • Experience with Amazon QuickSight, Adobe Workfront, in addition to productivity tools
  • Experience building processes, project management, and schedules

Additional commentary

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Summary and company overview

Summary Information about the Role

Amazon's Offensive Security, Penetration Testing Team is seeking a Program Manager (PM) to help keep Amazon's applications and services secure for its customers. This team is responsible for attacking Amazon's services, applications, and websites; and partnering with service teams to remediate weaknesses and sharpen our software development lifecycle. You will be challenged with opportunities, both technologically and as a leader, but will also be a great deal of fun if hacking Amazon sounds exciting to you. You will be in direct contact with teams in a variety of business verticals, giving you first hand knowledge about how Amazon is built and how it operates. Additionally, you will leverage the knowledge you gain about Amazon to find new ways to drive improvements to services, processes, and programs throughout the company.

Covering a broad range of work, this role is focused on managing and driving the penetration testing team's programs, operations, and initiatives by influencing key stakeholders and partnering with teams throughout Amazon to enable the implementation of innovative security solutions and controls to improve Amazon's security posture. You'll be using your program and project management skills to continually improve and mature the program, orchestrate penetration testing engagements, and manage third-party vendors and budgets in order to maintain and raise Amazon's high security bar. You'll be backed up by a team of highly-skilled security engineers, all working with a singular focus of maintaining our customer's trust.

A person in this role must show exemplary judgment in making trade-offs between short-term fixes and long-term security and business goals. They must also demonstrate resilience and navigate ambiguous situations with composure and tact. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Amazon and its customers secure.

Company Overview

About Amazon Security:

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Inclusive Team Culture

In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training and Career growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Apply now