Amazon Adds Mandiant Founder Kevin Mandia to Its Board
Kevin Mandia, the cybersecurity veteran who built Mandiant into one of the world's best-known breach investigation firms, joined Amazon's board of directors on 8 September 2026.
Key points
- Kevin Mandia was elected to Amazon's board of directors on 8 September 2026.
- Mandia founded Mandiant, which Google acquired in 2022 and folded into Google Cloud.
- He brings more than 30 years of cybersecurity experience across the US military, federal advisory roles, and private industry.
- Amazon cited the growing link between AI advances and cybersecurity risk as a reason for the appointment.
Amazon has added one of the most recognisable names in breach investigation to its board. Kevin Mandia, who spent three decades responding to high-profile cyberattacks, was formally elected on 8 September, the company announced.
Who is Kevin Mandia?
Mandia built his name by sending investigators in after hackers had already left. He founded Mandiant, a firm built around incident response (figuring out what happened during a breach, containing it, and tracing it back to its source) and threat intelligence. FireEye bought Mandiant in late 2013. The name resurfaced in 2021 when FireEye sold its products business separately, and Google completed its own acquisition the following year, bringing Mandiant into Google Cloud.
Before that, he worked as a computer security officer at the Pentagon and as a special agent in Air Force counterintelligence. He's also advised the federal government through two bodies: the National Security Telecommunications Advisory Committee and CISA's Cybersecurity Advisory Committee, which counsels the US government's main civilian cyber defence authority.
Why does this appointment matter?
Board-level cybersecurity expertise is still rare. Putting someone with hands-on breach experience in the room where Amazon's strategic decisions are made is a different proposition from hiring a policy consultant.
Mandia currently runs Armadin, a cybersecurity firm he founded, and is a co-founder and general partner at Ballistic Ventures, a venture capital firm backing early-stage security companies. That mix is precisely what Amazon says it wanted.
"His election reflects our commitment to having appropriate experience and perspectives at all levels of the company, including our Board of Directors," Amazon said in its announcement, first reported by SecurityWeek.
Amazon named AI explicitly in its rationale. As AI tools grow more capable, they hand attackers new ways to breach systems faster and at greater scale. Amazon is one of more than 120 companies involved in drafting shared AI incident-reporting standards, so the board-level pressure to govern that risk is concrete, not theoretical.
| Role | Detail |
|---|---|
| Amazon board election date | 8 September 2026 |
| Mandiant founded | Early 2000s |
| FireEye acquisition of Mandiant | Late 2013 |
| Mandiant name restored | 2021 |
| Google acquisition of Mandiant | 2022 |
| Years of cybersecurity experience | 30-plus |
Should you worry about what this means day to day?
For Amazon customers, nothing changes immediately. Governance appointments don't rewrite privacy settings. What they do signal is where the company is directing attention at the highest level, and right now Amazon is pointing it squarely at AI-era security risk. Watch whether Mandia's presence accelerates any concrete policy changes in how Amazon handles breach disclosure.
