Lead Threat Detection Architect

Amazon.com Services LLC; Maryland; On-site; USD 180,000 - 280,000; Full time

Job summary

Amazon.com Services LLC is seeking a Principal Security Engineer to define the technical direction for detecting and stopping sophisticated cyber threats across AWS. You will lead threat detection initiatives, prototype new detection approaches, and drive them to production with multiple teams, mentoring engineers along the way.

You will operate with high autonomy in ambiguous spaces, collaborate with software engineers, data scientists, and security professionals, and raise the technical bar

Qualifications

• Experience performing security investigations, detection engineering, threat hunting, and/or incident response.
• Experience with detection engineering and/or anomaly detection within security.
• Understanding of Tactics, Techniques, and Procedures (TTPs) used by threat actors or groups.
• Knowledge of security telemetry across 2+ domains (e.g., hosts, networks, cloud, physical security).
• Ability to develop code with at least one modern language, such as Python.
• Proven ability to provide technical and strategic leadership across multiple teams and/or within a large organization.
• Experience communicating technical concepts to a non-technical audience.
• Citizen within the EU.

Responsibilities

• Serve as an org-wide technical lead, setting technical direction, shaping long-term strategy, and increasing each team's productivity and effectiveness
• Identify and prioritize the highest-impact security detection problems across the org, driving clarity in ambiguous spaces
• Design and prototype new detection approaches, then drive them to production through engineering teams
• Stay connected to all critical projects across the org, auditing technical decisions and providing guidance on work led by others
• Mentor engineers across multiple job families and help managers guide the career growth of their team members
• Sponsor cross-org technical initiatives with partner teams across Amazon Security and AWS, driving decisions forward and unblocking teams to ensure delivery
• Build consensus across teams on important security and technical trade-offs, driving closure and alignment toward coherent outcomes
• Identify, evaluate, and advocate for new technologies to improve threat detection and mitigation capabilities
• Clearly communicate security risks and technical trade-offs to business leaders and non-technical stakeholders

Skills

Security investigations

Threat hunting

Incident response

Detection engineering

Leadership

Cross-team collaboration

Communication

EU citizenship

Tools

Python

AWS

Job description

Amazon.com Services LLC is seeking a Principal Security Engineer to define the technical direction for detecting and stopping sophisticated cyber threats across AWS. You will lead threat detection initiatives, prototype new detection approaches, and drive them to production with multiple teams, mentoring engineers along the way.

You will operate with high autonomy in ambiguous spaces, collaborate with software engineers, data scientists, and security professionals, and raise the technical bar