Principal Security TPM, AGS Security Engineering (New York)

AWS Global Sales drives adoption of the AWS cloud worldwide, enabling customers of all sizes to innovate and expand in the cloud. Our team empowers every customer to grow by providing tailored service, unmatched technology, and unwavering support. We dive deep to understand each customer's unique challenges, then craft innovative solutions that accelerate their success. This customer-first approach is how we built the world's most adopted cloud. Join us and help us grow. AWS is building a new security engineering team for the AWS Global Sales (AGS) organization, and we're looking for a Principal Technical Program Manager to help define it from day one. Customers are moving fast, especially into generative AI and agentic architectures, and the way our field works with them is changing just as quickly. This team is the dedicated function that helps the business and our customers build and innovate fast and securely.As a Principal Technical Program Manager, you'll own the security and governance frameworks the AGS field organization runs on, and the mechanisms that surface, reduce, and manage risk across it. Measuring how AGS performs against AWS-wide security standards, you'll find where risk concentrates and partner with AGS leaders to close gaps. You'll build and manage the programs that keep the field's security reviewer community active, calibrated, and current. The cross-functional coordination you run with AWS security organizations, Legal, and segment business leaders accelerates the business while holding a high security bar.Much of this work runs ahead of established practice. You'll shape how the field secures emerging engagement types. Across the organization, you'll invent new ways to discover, reduce, and manage risk at scale. The surface is broad, spanning a field engagement program that helps account teams build for customers at scale, prototyping engagements, public content security reviews, internal field tooling, and AGS-wide security training and campaigns. The customers behind this work span every size, industry, and region, with varying compliance requirements and every kind of technology stack. This is a ground-floor role with a global remit where you'll help define how we work.Key job responsibilities- Own the field's security and governance frameworks (customer builds, prototyping, public content), building on the AWS Security standards and codifying them into the steering docs, skills, MCPs, and agents the field builds with- Grow the field's security reviewer community, recruiting, training, and accrediting reviewers and keeping their judgment calibrated as technology and threats evolve, so security judgment spreads and reviews stay consistent- Own field security training on the responsibilities and frameworks the field operates within, partnering with security engineers and AWS Security on content and Field Enablement on delivery- Measure AGS against AWS-wide security standards and run the business security review that gives leadership a regular, prioritized read on risk, partnering with leaders to close gaps and enabling leaders to run their own- Partner with the business through post-incident follow-through, helping it articulate what happened, representing it to AWS Security leadership, and supporting it in closing the action items it owns- Own the AGS field's security roadmap, balancing near-term wins against long-term shifts in how the field builds, so the security bar keeps pace- Own the governance mechanism for security exceptions and escalations, keeping decisions consistent and documented, and holding the line when stakeholders challenge the process- Some travel required (up to 25%) A day in the lifeIn the morning, you might turn a recurring field security question into a standard that ships straight into the steering docs and agents the field builds with, so the next wave of teams can act on it themselves instead of escalating. After the team has worked an issue with Security Operations, you take the follow-through, helping the business articulate what happened, representing it to AWS Security leadership, and supporting it in closing the action items it owns. In the afternoon, you sharpen the reviewer community's recertification with security engineers so reviews stay consistent as technology shifts. Across the week you measure the field against AWS-wide standards, find where risk concentrates, and bring them to leadership to prioritize and close.About the teamThis new team is the security engineering function for AWS Global Sales (AGS), helping the field engage customers securely and keeping the business secure. You'll work closely with AWS Account Teams and the field's security community, AGS leaders, and partner teams across AWS security, tooling, and legal. It's a senior team with a broad mandate and a high bar, and the work protects the customer trust the business depends on.Diverse ExperiencesAWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why AWS?Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.Inclusive Team CultureAWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.Mentorship & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.Basic qualifications- 7+ years of technical product or program management experience- Experience managing programs across cross functional teams, building processes and coordinating release schedules- Bachelor's degree in Computer Science, Engineering, a related field, or equivalent experience- 5+ years of security, compliance and risk management experience- Experience owning/driving roadmap strategy and definitionPreferred qualification - Experience managing competing priorities and using metrics to drive business decisions- Master's degree in Computer Science, Computer Engineering, Information Technology, or related fields- 10+ years of technical program management experience leading initiatives that span multiple teams or organizations- Experience partnering with security engineering, application security, or legal and compliance functions to land cross-functional security outcomes- Experience designing and running training, accreditation, or community-of-practice programs at scale- Experience using AI, agents, and automation to scale program execution and risk reductionAmazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more abou