Manager, Security Engineering, AWS Security Incident Response
Core
Lead a regional team of security engineers in AWS Security Incident Response, driving the transformation from human-driven to AI-native security operations while managing high-severity incidents for customers.
Role type
Senior IC security manager (incident response & AI operations)
Builds
Automated triage workflows, AI-powered investigation agents, and human-in-the-loop security response systems
Domain
Cloud security, AI/ML operations, incident response
Deliverable
production ML models | infrastructure
Required skills
Team leadership, security operations management, incident investigation, executive communication, automation strategy, AI/ML fundamentals, metrics-driven improvement, cross-team coordination
Preferred skills
Security certifications (SANS GIAC, CISSP), Master's degree, alert triaging, response automation development, ML architecture knowledge, fast-paced operations experience
Technologies
AI investigation agents, automated triage workflows, AWS environments
Responsibilities
Own day-to-day operations for threat detection, triage, investigation, and incident response; Manage investigation queue health and enforce response time targets; Engage directly with customer security executives (CISOs, VPs) during high-severity incidents; Drive the response-to-automation flywheel to improve detection and automation; Oversee engineers working alongside AI investigation agents; Partner with peer managers to maintain 24/7 follow-the-sun coverage
Seniority
Manager, hands-on leadership