Executive record

CJ Moses

CJ Moses is Chief Information Security Officer and VP of Security Engineering at Amazon, as of July 31, 2026, per IT Brew profile (August 2025).

Seat verified July 31, 2026 · Added to the record July 31, 2026 · no move on the Wire yet

Tracked record

2026-07-31 · Roster verification

CJ Moses, Chief Information Security Officer and VP of Security Engineering at Amazon, verified July 31, 2026

Source: IT Brew profile (August 2025) ↗ · Company record

No appointment or departure for CJ Moses is on the Wire. This page rests on the roster entry above: a verification, against the source cited, of who held the Amazon seat on that date. It is not a career history and states nothing beyond that entry.

Elsewhere

Public profiles we matched to CJ Moses by exact name and the company on our record. Links only; we do not copy from them.

LinkedIn ↗

CISO Voices: in public

What CJ Moses has said in public while in the seat: posts on LinkedIn, X, Bluesky and Mastodon, bylined articles, podcast appearances, talks and videos, described in our words. We link to each one and never reproduce it. All voices · The speaking circuit

October 21, 2026 · LinkedIn post · Incidents & threats
On PHP-based web shell threats identified by Amazon threat intelligence
Read on LinkedIn ↗
October 20, 2026 · Podcast appearance, The San Francisco Tribune · Career & leadership
On security leadership lessons from a major tech company's security chief
Terra Security Podcast Debut: Six Lessons From Amazon CISO CJ Moses
Listen at The San Francisco Tribune ↗
October 20, 2026 · Podcast appearance, TNW | Contributed · AI & agents
On an AI-driven cybersecurity podcast launch featuring a prominent security executive
Amazon CISO CJ Moses opens Terra Security’s AI cybersecurity podcast
Our takeOpinion
The CISO and VP of Security Engineering at Amazon is the seat behind this opening episode of a new AI-focused cybersecurity podcast. The episode covers how AI compresses the time between initial access and takeover, honeypot intelligence feeding patching priorities, security scanning inside delivery pipelines, North Korean applicants using AI-built personas, and measuring exposure rather than counting vulnerabilities. We agree that the useful metric is time from discovery to mitigation, and we would go further by tracking it per exposure class, since a quick fix to an edge service says little about a slow one in a legacy system. Mitigation should be pre-authorised: if blocking access or isolating a host needs a committee, the window closes before anyone convenes. The identity thread deserves more attention than it usually gets, because hiring screens, access provisioning and insider-risk work often sit in different teams, and AI-built personas exploit exactly those seams. We would also test the claim that continuous validation can run without slowing delivery against your own pipelines before copying the model. Watch whether later episodes show how speed of response is measured in practice.
Written from the episode's published description. How we write these
Listen at TNW | Contributed ↗

This record begins with CISO Tribune's tracking in 2026 and is not a complete career history. Corrections welcome via the desk.

Related guides

How to Become a CISO: Career Path, Experience and Certifications
There is no CISO degree and no single route to the seat. What the certification bodies, career guides and CISO Tribune's own record show about the path: typical prior roles, the certifications that actually come up, and how long it takes.
What Does a CISO Do? Responsibilities, Reporting Lines and Required Skills
A CISO owns an organization's cybersecurity risk end to end: strategy, the security program, incident response and the board conversation. Sourced to NIST, CISA, Okta, Splunk and IANS Research.
CISO vs CIO vs CSO vs CTO: Who Owns What
The chief information security officer (CISO) owns cyber risk and the security program; the chief information officer (CIO) builds and runs the systems.