Manager III, SecEng, AppSec AI

Lead Application Security for Amazon Generative AI services by setting strategy, scaling secure review processes, and guiding a team focused on LLM-integrated application risks.

• Lead, manage, and develop a team of Security Engineers and Technical Program Managers responsible for Application Security (App Sec) across Amazon’s Generative AI services and AI-powered applications.
• Set the strategic direction for GenAI Application Security review processes
  , including goal-setting and prioritization for securing LLM integrations
  , prompt engineering workflows, and AI model deployments
  .
• Drive AI security initiatives and influence leadership and key stakeholders through close partnership with AI/ML teams across Amazon.
• Build a collaborative culture that helps the team deliver outcomes in a rapidly changing GenAI security environment.
• Coordinate effective cross-team execution and communication across multiple groups with competing priorities, including data science
  , ML engineering
  , and product teams
  .
• Improve internal programs and processes for GenAI security reviews, including threat modeling for AI systems
  , secure prompt design
  , and model security assessments
  .
• Create and deliver high-quality documentation for both technical and non-technical audiences covering complex GenAI security topics.
• Advance adoption of GenAI-specific security processes
  , automation
  , and tooling to increase operational efficiency and scale security reviews for AI applications.
• Stay current on emerging GenAI security threats and vulnerabilities, with expertise in areas such as prompt injection prevention
  , model security
  , RAG security
  , and AI supply chain security
  .
• Mentor and develop individual contributors, strengthening technical depth and leadership capabilities.

• 5+ years of experience managing and developing teams.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Knowledge of security practices for web services
  , video content protection technologies
  , cryptography
  , network security protocols
  , and operating system security
  .
• Experience applying threat modeling or other risk identification techniques to both traditional and AI-powered applications.
• Understanding of Generative AI technologies,
  large language models
  , and AI application architectures
  .

• Generative AI
• Large language models (LLMs)
• LLM integrations
• Prompt engineering
• AI model deployments
• Threat modeling
• RAG security
• AI supply chain security
• Adversarial machine learning
• AI/ML frameworks
• LLM APIs
• RAG architectures
• AI model deployment pipelines
• Cryptography
• Network security protocols

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

• Knowledge of information security technologies such as security design review
  , threat modeling
  , risk analysis
  , and software testing techniques
  .
• Experience with GenAI security challenges including prompt injection
  , model security
  , data privacy in AI systems
  , and adversarial machine learning
  .
• Familiarity with AI/ML frameworks
  , LLM APIs
  , RAG architectures
  , and AI model deployment pipelines
  .

Location: Seattle, WA (onsite)

Salary: USD 175, per year