Principal Security Architect - Cloud Threat Detection

Socket.dev; Maryland; On-site; USD 189,000 - 256,000; Full time

Job summary

Amazon seeks a Principal Security Engineer to shape the technical direction for threat detection and mitigation across host, network, identity, and physical security domains. You will design, prototype, and lead production deployments, mentoring engineers while aligning cross-team priorities to deliver high-impact security solutions.

You will influence leadership, identify hard problems, and drive initiatives that protect AWS customers worldwide, with autonomy and a proven track record in

Qualifications

• Experience performing security investigations, detection engineering, threat hunting, and/or incident response
• Experience with detection engineering and/or anomaly detection within security
• Understanding of Tactics, Techniques, and Procedures (TTPs) used by threat actors or groups
• Knowledge of security telemetry across 2+ domains (e.g., hosts, networks, cloud, physical security)
• Ability to develop code with at least one modern language, such as Python
• Proven ability to provide technical and strategic leadership across multiple teams and/or within a large organization
• Experience communicating technical concepts to a non-technical audience
• Citizen within the EU

Responsibilities

• Serve as an org-wide technical lead, setting technical direction, shaping long-term strategy, and increasing each team's productivity and effectiveness
• Identify and prioritize the highest-impact security detection problems across the org, driving clarity in ambiguous spaces
• Design and prototype new detection approaches, then drive them to production through engineering teams
• Stay connected to all critical projects across the org, auditing technical decisions and providing guidance on work led by others
• Mentor engineers across multiple job families and help managers guide the career growth of their team members
• Sponsor cross-org technical initiatives with partner teams across Amazon Security and AWS, driving decisions forward and unblocking teams to ensure delivery
• Build consensus across teams on important security and technical trade-offs, driving closure and alignment toward coherent outcomes
• Identify, evaluate, and advocate for new technologies to improve threat detection and mitigation capabilities
• Clearly communicate security risks and technical trade-offs to business leaders and non-technical stakeholders

Skills

Security investigations

Threat hunting

Detection engineering

Security telemetry

Python

Technical leadership

Communication to non-technical

EU citizenship

IAM

Lambda

EC2

VPC

S3

Tools

IAM

Lambda

EC2

VPC

S3

Job description

Amazon seeks a Principal Security Engineer to shape the technical direction for threat detection and mitigation across host, network, identity, and physical security domains. You will design, prototype, and lead production deployments, mentoring engineers while aligning cross-team priorities to deliver high-impact security solutions.

You will influence leadership, identify hard problems, and drive initiatives that protect AWS customers worldwide, with autonomy and a proven track record in