Amazon Adds Mandiant Founder Kevin Mandia to Its Board

Key points

• Kevin Mandia was elected to Amazon's board of directors on 8 September 2025.
• Mandia founded Mandiant, which Google acquired in 2022 and folded into Google Cloud.
• He brings more than 30 years of experience in cybersecurity across the US military, government advisory roles, and the private sector.
• Amazon cited the growing link between artificial intelligence advances and cybersecurity risk as a reason for the appointment.

Amazon has added one of the most recognisable names in breach investigation to its board of directors. Kevin Mandia, who spent three decades responding to some of the highest-profile cyberattacks on record, was formally elected to the board on 8 September, the company announced.

Who is Kevin Mandia?

Mandia built his reputation by sending investigators into organisations after hackers had already broken in. He founded Mandiant, a firm specialising in incident response (meaning the work of figuring out what happened during a breach, containing the damage, and tracing it back to its source) and threat intelligence.

FireEye, a rival security company, bought Mandiant in late 2013. The Mandiant name then disappeared for several years before resurfacing in 2021 when FireEye sold off its products business separately. Google completed its acquisition of Mandiant in 2022 and brought the company into Google Cloud.

Before the private sector, Mandia worked as a computer security officer at the Pentagon and as a special agent in the Air Force Office of Special Investigations. He has served on two federal advisory bodies: the National Security Telecommunications Advisory Committee and the Cybersecurity and Infrastructure Security Agency's Cybersecurity Advisory Committee, which advises the US government's main civilian cyber defence authority.

Why does this appointment matter?

Board-level cybersecurity expertise is still rare at large companies. Mandia's appointment puts someone with direct, hands-on breach experience in the room where Amazon's strategic decisions are made.

Mandia currently runs Armadin, a cybersecurity firm he founded, and is a co-founder and general partner at Ballistic Ventures, a venture capital firm that funds early-stage security companies. That combination of operational and investment experience is what Amazon says it wanted.

"His election reflects our commitment to having appropriate experience and perspectives at all levels of the company, including our Board of Directors," Amazon said in its announcement, first reported by SecurityWeek.

Amazon specifically named artificial intelligence as part of the rationale. As AI tools become more capable, they also create new ways for criminals to attack systems at scale, and companies like Amazon are under pressure to demonstrate they are governing that risk seriously.

For Amazon customers and ordinary users, this kind of governance appointment does not change day-to-day privacy settings or data handling immediately. It is a signal about where the company is directing attention at its highest level.