Security Engineering Manager – IR, AWS Security Operations Center; SOC

DESCRIPTION

You have hundreds of thousands of hosts, hundreds of millions of lines of code, billions of online transactions, and one of the most visited sites on the Internet. Now go lead a team to secure it! At Amazon, we obsess over our customers and maintaining their trust. To earn that trust in an environment as vast and varied as Amazon’s requires the applied skills of smart security engineers and experienced, innovative security leaders willing to tackle never‑before‑seen challenges at dizzying scales.

You will manage a team of talented security professionals responsible for detecting, analyzing and responding to information security threats across Amazon and its subsidiaries, as a part of a global, follow‑the‑sun operations team. An ideal candidate for this role will be able to work at all levels, from the theoretical knowledge of physical security principles to the practical application and real‑world implementation of processes and measures.

You must have a proven record of accomplishment in operations room/center dispatching, SOC data center security operations, physical security, customer service; and possess excellent verbal and written communication skills with the ability to multi‑task. You should demonstrate good judgement and critical thinking while also being able to follow SOC tasks and procedures utilizing discretion at all times. The AWS SOC is a 24/7/365 operation and shift work will be required to include days, nights, weekends and holidays.

• Lead and coordinate the activities of the Security Operations node located in London, UK to ensure timely and effective response to information security threats.
• Execute security operations processes, identify and measure critical security operations metrics and continually improve the efficiency and effectiveness of the Security Operations.
• Work closely with peer managers in Information Security and Corporate IT teams to identify and implement process changes, improvements and efficiencies and ensure solid security practices.
• Optimize and enhance existing processes with an eye to reducing a high operational load.
• Ensure continuity of operations for security events through effective communications between the global nodes of the Amazon Security Operations Center.
• Work with your peers to assist the Global Security Operations Manager in defining the overall security response strategy for Amazon.
• Create a positive work environment & provide a goal‑driven framework for information security success in which team members may achieve organizational & individual performance objectives.
• Own all facets of performance, hiring & career management for the team; regular one‑on‑one meetings with all team members are required.
• Provide technical & soft skill coaching to maintain a well‑rounded, innovative & operational organization.
• Establish training programs for your engineers.
• Supervise day‑to‑day activities of the team, providing management escalation support as required.
• Track and report on key initiatives being delivered by the team.

This position supports Security Engineers and Technical Program Managers within Security and incident response activities. You will drive “Tier 1” related issues to resolution across numerous service teams and other more senior Security Engineers. You will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle an assortment of disparate tasks which may include small‑project and software development work.

This role will provide career growth opportunities as you gain new security skills in the course of your duties.

• Bachelor’s degree.
• 5+ years of direct experience leading, managing & developing high‑performance teams.
• 3+ years of hands‑on experience in information security technologies such as continuous security monitoring, anti‑malware controls, intrusion detection/prevention, access control & CSIRT‑focused systems.
• 3+ years of progressive experience within a Security Operations Center or similar operating environment.
• Ability to work any shift pattern within the 24/7/365 operation including days, nights, holidays…