Principal AWS Security Engineer: Threat Detection

Amazon; Annapolis, Northern (MD, KY); Hybrid; USD 189,000 - 256,000; Full time

Benefits offered by this job

RSUs

Health insurance

401(k) matching

Paid time off

Job summary

Amazon is seeking a Principal Security Engineer to lead the technical strategy for detection and mitigation across AWS. You will craft cross-domain threat detection ideas and guide initiatives through multiple teams with high autonomy.

You will mentor engineers, collaborate with data scientists and security engineers, and advocate for new technologies to strengthen threat defense for AWS customers worldwide.

Qualifications

• Experience performing security investigations, detection engineering, threat hunting, and/or incident response.
• Experience with detection engineering and/or anomaly detection within security.
• Understanding of TTPs used by threat actors or groups.
• Knowledge of security telemetry across 2+ domains (hosts, networks, cloud, physical).
• Ability to develop code with Python and familiarity with security automation.
• Proven ability to provide technical and strategic leadership across teams.

Responsibilities

• Serve as an org-wide technical lead, setting direction and increasing team productivity.
• Identify highest-impact detection problems and drive clarity in ambiguity.
• Design and prototype new detection approaches and push to production.
• Audit decisions and guide work led by others across the org.
• Mentor engineers and help managers grow their teams.
• Sponsor cross-org initiatives with partner teams across Amazon Security and AWS.

Skills

Detection engineering

Threat hunting

Incident response

Security telemetry

Cloud security

Cross-team leadership

Communication to non-technical

GenAI/LLMs in security

Threat modeling

Python

Tools

Python

Job description

Amazon is seeking a Principal Security Engineer to lead the technical strategy for detection and mitigation across AWS. You will craft cross-domain threat detection ideas and guide initiatives through multiple teams with high autonomy.

You will mentor engineers, collaborate with data scientists and security engineers, and advocate for new technologies to strengthen threat defense for AWS customers worldwide.