Software Development Manager, AppSTAR COMPASS

Build a brand-new team to bring security review into the age of AI agents, at Amazon scale. You'll own the platform that automatically evaluates every code change tens of thousands of engineers ship, and clears the vast majority without a human ever touching it.

Security review has always been a bottleneck. A developer ships a change, waits for someone to look at it, and the security team drowns in a queue it can never fully clear. We're ending that tradeoff. Our engine evaluates changes as they happen, decides how much scrutiny each one actually needs, and handles the common case automatically with no wait for the developer, no queue for the reviewer.

The team is funded and forming now, and we're looking for the manager to build it. That means a clean slate on the architecture, your own hiring bar, and a stable of experienced security engineers backing your team with the risk expertise, so your engineers build instead of guessing at what matters. If you want to build AI-driven systems that make security invisible instead of painful, this is the seat.

• Hire and lead a new team of software engineers and a technical program manager
• Own an automated security assurance platform end to end, from architecture to production
• Ship something measurable: fewer manual reviews, faster releases, no added burden on developers
• Hire, build, and grow a new team of software engineers, setting the bar for technical quality and inclusive team culture from day one.
• Own the design and delivery of a platform that continuously evaluates code changes for security risk, routes the small fraction needing human attention, and automatically clears the rest.
• Work directly with the security engineers who handle escalated changes, building the queues, context, and tooling that make their reviews fast.
• Define the technical roadmap, make build-versus-integrate calls, and negotiate the interfaces with adjacent platform and telemetry teams your system depends on.
• Build the developer-facing experience: clear, trustworthy visibility into what was evaluated, what happened, and why, with as close to zero required action as possible.
• Establish the operational fundamentals: monitoring, calibration, on-call, and the feedback loops that keep automated decisions accurate as the code and the threat landscape change.
• Represent the team to senior leadership, and communicate progress, risk, and tradeoffs candidly.

You’ll spend your morning with your engineers on architecture: how events flow through the pipeline, where the automated checks run, what happens when confidence drops. Midday you’re with the security engineers discussing risk-ranking logic, working out what the platform needs to make their decisions real. Afternoons swing between interviews, unblocking a dependency with a partner team, and reviewing pilot data with your program manager.

Some weeks you’re deep in a design doc; others you’re rebuilding a plan because the data told you something you didn’t expect.

We’re the team that decides how security attention gets spent. Our customers are the engineers shipping code every day and the security engineers reviewing it. Both are currently paying a tax we think is unnecessary. Our mission is to remove it: make security assurance automatic, proportional to real risk, and visible to the people it protects. We’re a small group with an unusually direct line between the work and the outcome.

We care about getting the decision right more than being the ones who make it, and we’d rather encode expertise into a mechanism than hoard it.

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we…