Manager III, SecEng, AppSec AI

Lead Application Security for Amazon Generative AI services by setting strategy, scaling secure review processes, and guiding a team focused on LLM-integrated application risks.

Responsibilities

• Lead, manage, and develop a team of Security Engineers and Technical Program Managers responsible for Application Security (AppSec) across Amazon’s Generative AI services and AI-powered applications.


• Set the strategic direction for GenAI Application Security review processes , including goal-setting and prioritization for securing LLM integrations , prompt engineering workflows, and AI model deployments .


• Drive AI security initiatives and influence leadership and key stakeholders through close partnership with AI/ML teams across Amazon.


• Build a collaborative culture that helps the team deliver outcomes in a rapidly changing GenAI security environment.


• Coordinate effective cross-team execution and communication across multiple groups with competing priorities, including data science , ML engineering , and product teams .


• Improve internal programs and processes for GenAI security reviews, including threat modeling for AI systems , secure prompt design , and model security assessments .


• Create and deliver high-quality documentation for both technical and non-technical audiences covering complex GenAI security topics.


• Advance adoption of GenAI-specific security processes , automation , and tooling to increase operational efficiency and scale security reviews for AI applications.


• Stay current on emerging GenAI security threats and vulnerabilities, with expertise in areas such as prompt injection prevention , model security , RAG security , and AI supply chain security .


• Mentor and develop individual contributors, strengthening technical depth and leadership capabilities.

Requirements

• 5+ years of experience managing and developing teams.


• Bachelor’s degree in Computer Science, Information Security, or a related field.


• Knowledge of security practices for web services , video content protection technologies , cryptography , network security protocols , and operating system security .


• Experience applying threat modeling or other risk identification techniques to both traditional and AI-powered applications.


• Understanding of Generative AI technologies, large language models , and AI application architectures .

Technologies

• Generative AI


• Large language models (LLMs)


• LLM integrations


• Prompt engineering


• AI model deployments


• Threat modeling


• RAG security


• AI supply chain security


• Adversarial machine learning


• AI/ML frameworks


• LLM APIs


• RAG architectures


• AI model deployment pipelines


• Cryptography


• Network security protocols

Benefits

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)


• 401(k) matching


• Paid time off


• Parental leave


• Sign-on payments


• Restricted stock units (RSUs)

Preferred Qualifications

• Knowledge of information security technologies such as security design review , threat modeling , risk analysis , and software testing techniques .


• Experience with GenAI security challenges including prompt injection , model security , data privacy in AI systems , and adversarial machine learning .


• Familiarity with AI/ML frameworks , LLM APIs , RAG architectures , and AI model deployment pipelines .

Location: Seattle, WA (onsite)

Salary: USD 175,100 - 236,900 per year