Amazon adds Mandiant founder Kevin Mandia to its board

“If there is a way in, the modern AI threat will find it,” Kevin Mandia wrote in March, in the blog post that launched his cybersecurity startup, Armadin. Six months later, Amazon has elected him to its board of directors.

Amazon announced the appointment in a post on its company news site on 9 September. It said Mandia joined the board on 8 September and described him as a “widely recognized cybersecurity expert” with more than 30 years of experience. A securities filing made the same day shows he will sit on the board’s Audit Committee and its Security Committee.

The appointment takes Amazon’s board to 12 members, Catherine Perloff reported for The Information. CNBC’s Annie Palmer also reported the move, along with details of his pay from the filing.

From the Pentagon to Mandiant

Mandia founded Mandiant in 2004 and served as its chief executive. The firm investigated corporate data breaches, and Google bought it for $5.4bn in 2022. Amazon’s post says the deal closed in September of that year.

His career began in the military. According to Amazon, he served in the US Air Force as a computer security officer at the Pentagon. He later worked as a special agent in the Air Force Office of Special Investigations. He has also served on the National Security Telecommunications Advisory Committee and on the Cybersecurity Advisory Committee of CISA, the US Cybersecurity and Infrastructure Security Agency. In February 2021, he testified at a hearing of the US Senate Intelligence Committee, CNBC noted.

Reports differ on when he left Google. CNBC reported that he left the company in 2024. GeekWire’s Todd Bishop reported that he stayed on as a strategic advisor until July 2025.

Armadin and the warning about AI attacks

Mandia is now the founder and chief executive of Armadin, which GeekWire reported was founded in September 2025. The startup announced $189.9m in seed and Series A funding in March, TechCrunch reported. Accel led the round. GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures and In-Q-Tel also took part.

Armadin uses AI to run attacks against corporate networks so that companies can test their defences, GeekWire reported. In his launch post, Mandia wrote that the company would rely on AI agents to scale the work of its red team, the specialists who attack a client’s systems to find weak points. He opened the post with a broader claim: “The AI shift is going to change cybersecurity more broadly and rapidly than any other transition in history.”

He made a similar point in an interview at the time of the launch. “When you have AI on offense, what you are going to get is a technology that can think, can learn, can adapt,” he told CNBC, according to TechCrunch. He also said attackers would complete in minutes work that used to take days.

Armadin is not his only current role. Mandia co-founded Ballistic Ventures, a venture capital firm focused on cybersecurity, where he is a general partner. Amazon’s post says he uses the firm to mentor and fund the next generation of cybersecurity entrepreneurs.

The seat Keith Alexander left

The board had shrunk earlier this year, when Keith B. Alexander stepped down, according to The Information. Alexander, 74, is a retired US Army general and a former director of the National Security Agency. GeekWire reported in April that his departure would take effect after Amazon’s annual shareholder meeting on 20 May.

Alexander joined the board in September 2020 and had chaired its Security Committee, GeekWire reported. Amazon did not give a reason for his exit. “We’re grateful to General Alexander for his service on our Board since 2020,” the company said in a statement at the time.

Shares and a family link in the filing

The filing sets out what Mandia receives for the role. He was granted restricted stock units for 4,086 shares of Amazon common stock. They vest in three equal annual instalments from 15 November 2027, provided he stays on the board. CNBC valued the award at about $1m at Amazon’s closing price on 9 September.

The filing also discloses a family connection. Kristin Mandia, his sister-in-law, works at Amazon. Her annual salary is $185,000, and she received a 2026 grant of 103 restricted stock units. The filing states that her pay is consistent with that of other employees at the same level. According to CNBC, she is a senior online community manager for Amazon Quick, the company’s enterprise AI service.

What Amazon said about AI

Amazon tied the appointment to the spread of AI. “Cybersecurity is one of the most consequential risks and responsibilities organizations face today,” the company wrote. It added that the threat landscape is changing quickly alongside advances in AI. Amazon said his experience would “help inform the Board’s perspective on these opportunities and challenges”.

CNBC reported the appointment alongside two recent incidents. In July, OpenAI disclosed that its autonomous agents had breached Hugging Face. In April, Anthropic limited the rollout of its Mythos AI model over concerns that hackers could use it for cyberattacks.

TNW has reported on similar cases since. Anthropic said in July that its own Claude models breached three companies during cyber tests. In August, an AI agent asked to book a gym class in Australia hacked the booking website instead, in the country’s first known autonomous cyberattack.

In July, TNW also reported that AI’s hacking skills are outgrowing the tests built to measure them. Mandia joins a board whose Security Committee Alexander once chaired, and he will sit on it from his first day.