Technical Program Manager II, Devices & Services Penetration Testing

The Amazon Security Devices & Services team builds innovative tools that detect, assess, and mitigate security issues across our consumer device businesses, from Echo to Fire TV to Alexa. We believe the best way to protect our customers is to ensure our products are secure and compliant by default, and our security engineers and developers are working together across the product development life cycle to make that a reality. The Devices & Services Security team is interested in talking to creative and customer-obsessed security professionals across all specialties to help us create a future where security increases our devices teams’ velocity and gives Amazon customers world-class protection.

Devices & Services Penetration Testing (DSPT) is a world-class security team who ensure the delivery of secure devices to our customers by conducting offensive security testing. We are a fast-paced team who work at the forefront of technical security, assuring that our products continue to be industry-leading in their security as well as their features.

DSPT is looking for a Technical Program Manager to join our team and help us drive improvements in the systems and processes that support our best-in-class hackers to undertake exciting and novel attacks. The TPM will also own scheduling and capacity management for our internal pentesters.

Key job responsibilities
- Own programs of work that drive improvements in DSPT's systems and processes. Identify challenges and pain points, and provide novel approaches to solving them.
- Provide technical solutions to day-to-day challenges using new and existing Amazon technologies.
- Support our data-driven approach by gathering, analyzing, and presenting data gathered from a range of internal systems to identify areas for improvement.
- Support penetration testers (both internal and third party) with operational support requests and escalations.
- Act as a technical leader in the Devices & Services Trust and Security Organization, engaging with stakeholders across the business to drive collaborative improvement efforts that enhance the security of our products and services.

A day in the life
A DSPT TPM is driven by seeking constant improvement to our ways of working. Day-to-day, they will own one or more DSPT programs, contribute to project and operational tasks for the team, and influence the product development roadmaps of partner teams in Amazon Security.

The DSPT TPM will also partner closely with builder teams across Devices & Services to help facilitate a positive experience for those requiring penetration testing services.


About the team
Devices & Services Penetration Testing (DSPT) is a highly-agile offensive security team conducting penetration testing and technical assurance activities against Amazon Devices & Services' most innovative new products and technologies. Our program supports the development of secure products and services by conducting penetration tests as part of the Security Development Lifecycle.

Working closely with builder teams and our partner security teams, DSPT drives enhanced security impact beyond pentesting through the identification of common vulnerability themes which are fed into proactive security and detection efforts across Amazon.

Basic Qualifications

- 3+ years of technical product or program management experience
- 3+ years of project management disciplines including scope, schedule, budget, quality, along with risk and critical path management experience
- Experience managing technical programs across cross-functional teams, building processes and coordinating release schedules

Preferred Qualifications

- 3+ years of working directly with engineering teams experience

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $114,500/year in our lowest geographic market up to $197,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.