Note: The job is a remote job and is open to candidates in USA. Amazon is a global technology company that securely connects customers worldwide to its services and marketplaces. The company is seeking a founding Red Team Manager to build and lead an offensive security team focused on simulating bot attacks, DDoS campaigns, and emerging AI-driven threats. The role will translate offensive findings into defensive improvements and communicate risks to senior leadership and engineering teams.
Responsibilities
- Recruit, mentor, and grow a team of offensive security engineers
- Plan and run intelligence-driven red team operations targeting bot detection platforms, WAFs, CDN protections, and DDoS mitigation services; develop custom tooling for anti-detect browser automation, TLS fingerprint manipulation, and behavioral replay
- Identify and simulate emerging AI-driven attack vectors including autonomous browsing agents, LLM-powered bots, agentic scraping before they become widespread, keeping Amazon's defenses ahead of the curve
- Establish workflows with bot detection engineering teams to translate offensive findings into measurable defensive improvements
- Report findings as executive summaries for senior leadership in business risk language and detailed technical breakdowns for engineering teams to drive remediation
Skills
- 5+ years of managing and developing teams experience
- 5+ years of progressive work within a software security team or related operating environment experience
- Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience managing remote team members
- 3+ years of experience in offensive security (red teaming, adversary simulation, penetration testing)
- Experience conducting or managing DDoS simulation testing at scale
- Experience with anti-detect browser frameworks (Nodriver, Puppeteer Stealth variants), TLS fingerprint spoofing, Canvas/WebGL evasion techniques
Benefits
- Sign-on payments
- Restricted stock units (RSUs)
- Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
- 401(k) matching
- Paid time off
- Parental leave
Company Overview