Insider Threat Security Engineer & Threat Hunter

Amazon; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon is seeking a Security Engineer for the Enterprise Protection Program's Account Misuse Team. You will lead investigations into insider threats, analyze large data sets, and develop tools to detect and prevent misuse across Amazon and AWS.

The role emphasizes threat hunting, cross-functional collaboration with HR/legal/engineering, and ownership of high-impact security initiatives in a fast-paced environment.

Qualifications

• Bachelor's degree in computer science or equivalent.
• 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• 3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• Experience working with global teams and diverse partners
• 4+ years of fraud investigation, abuse, cyber-crimes, or equivalent experience

Responsibilities

• Lead daily investigations into active insider threats using data from internal and external sources
• Build sophisticated queries and process large datasets to identify and pursue potential insider threat activity
• Apply deep analytical skills to uncover complex security patterns and anomalies
• Develop proactive, innovative projects that leverage technical expertise to create innovative solutions
• Design and implement tools for detection, mitigation, and prevention of insider threat activity
• Drive security process improvements to strengthen Amazon's internal threat protection capabilities
• Partner effectively with HR, legal, engineering, analytics, and prevention teams to execute security initiatives
• Deliver results independently and through collaboration across partner teams
• Contribute to team knowledge sharing
• Take ownership of complex security challenges
• Contribute to strategic security planning and process optimization
• Participate in on-call responsibilities (typically one week every two months)

Skills

Threat hunting

Data analysis

Scripting

Security incident investigation

Education

Bachelor's degree in computer science or equivalent

Tools

SQL

Job description

Amazon is seeking a Security Engineer for the Enterprise Protection Program's Account Misuse Team. You will lead investigations into insider threats, analyze large data sets, and develop tools to detect and prevent misuse across Amazon and AWS.

The role emphasizes threat hunting, cross-functional collaboration with HR/legal/engineering, and ownership of high-impact security initiatives in a fast-paced environment.