Security Operations Centre Manager, AWS Security in London

Amazon Web Services (AWS) is the leading cloud provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’ multi-tenant infrastructure.

AWS is looking for an exceptional Security Operations Centre (SOC) Manager, to work in a team of technical and non-technical experts, with experience in building and developing teams that excel, as well as experience in improving processes and response to events through automation and efficiencies. You will own and develop a team of high performing security engineers and incident responders to support UK customers and their cloud workloads. You’ll work in a high pace, high visibility environment to execute the team’s mission and continue to raise the security bar for our customers.

You will have visibility at senior levels of government agencies, commercial institutions, and AWS including interaction with CISOs, CTOs, their staffs, and AWS senior leadership. You will be working within a broader team of industry-leading security experts working with UK customers to operate and continuously improve industry-leading security programs and processes. This broader team manages the underlying security programs and processes for personnel security, physical and logical accreditation, education, awareness and training and assurance.

This role will contribute to the development of the team, at a high pace, in a high visibility environment, to execute the team’s vision. We’re looking for an experienced and self-motivated candidate who can prioritise well and can communicate clearly and compellingly. This Security Operations Centre Manager will have a broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence.

Among other duties, the SOC Manager will:

• Provide leadership, strategy and direction to the operational team for security operations for the UK region.
• Build, develop and maintain SOC policies, procedures and processes that enable an effective and efficient region.
• Ensure information and security data is continuously collected, correlated and analysed to detect external and internal threats and vulnerabilities to our services.
• Gather evidence, evaluate risk and deliver a plan to respond to contain and remove security threats as quickly and safely as possible.
• Define and review key security performance indicators that ensure service delivery and service improvements.
• Ensure integration and handover of new security services within the monitoring and detection capability.
• Develop and create reports for management updates and escalations using key program performance metrics.
• Optimise tools and processes that prepare the SOC to respond to security threats of the future.
• Engage with AWS colleagues and customer leadership teams on a regular basis.

Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.

About the team

Diverse Experiences: Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture: AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Training & Career Growth: We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance: We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

You will need to be a UK national and able to obtain and maintain a UK Government Security Clearance.

BASIC QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security.
• Experience in managing and developing teams.
• Experience in progressive work within a software security team or related operating environment.
• Experience applying threat modeling or other risk identification techniques or equivalent.

PREFERRED QUALIFICATIONS

• Information security professional certification (SANS GIAC, CISSP etc.).
• Master's degree in Computer Science or a related field.
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques.
• Experience managing remote team members.