Security Engineer, Correlation and Response, AWS Security Hub

Amazon

Boston, Northern (MA, KY)

Hybrid

USD 159,000 - 202,000

Full time

7 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Health insurance

RSUs

401(k) matching

Paid time off

Job summary

Amazon's AWS Security Hub team in Boston is seeking a Security Engineer to advance threat detection, correlation and response at scale across AWS and other cloud environments. You will research emerging threats, develop high‑confidence markers and rules, and collaborate with engineers to shape analysis and visibility for customers.

This role requires experience in threat modeling, scripting (Python, Bash, or PowerShell), cloud development with Java and AWS tools, and deep knowledge of

Qualifications

Experience evaluating threats and vulnerabilities, assigning criticality based on impact.
Experience scripting with Python, Perl, Bash or PowerShell.
Experience with software development for the cloud using Java and AWS Developer Tools.
Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture.
Knowledge of cloud computing concepts and design considerations for AWS, Azure and GCP.
2+ years of non academic experience in threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience.

Responsibilities

Research emerging threats to develop criticality and posture management ideas.
Build high-confidence markers and rules that correlate criticality across conditions from data sources.
Collaborate with engineering and product teams to shape the analysis, context and inference that drive visibility into threats and vulnerabilities.

Skills

Threat modeling

Python scripting

Cloud development

Security automation

Networking knowledge

Log analysis

Education

Bachelor's degree in computer science or equivalent

Tools

Java

AWS Developer Tools

Linux/Unix tools

Linux/Unix

Job description

Security Engineer, Correlation and Response, AWS Security Hub

ID lavoro: 10487822 | Amazon Development Center U.S., Inc.

Are you excited about advancing the state of threat detection, correlation and response at scale to mitigate risk from an ever‑evolving threat landscape for a diverse range of customers? The AWS Security Hub team is looking for a highly motivated Security Engineer to join our team. In this role, you will research emerging threats to develop new criticality and posture management ideas and build high‑confidence markers and rules that correlate criticality across a diverse set of conditions from large‑scale data sources. You will work closely with engineering and product teams to shape the analysis, context and inference that drive visibility into the most critical threats and vulnerabilities for AWS customers operating on AWS and other cloud providers. You will also develop innovative methods utilizing the latest techniques to analyze detections at scale. Your expertise will help defend the data of Amazon's millions of customers against the most critical threats.

Key job responsibilities

Basic qualifications

Experience evaluating threats and vulnerabilities, assigning criticality based on impact, and developing response automation
Experience scripting with Python, Perl, Bash or PowerShell
Experience with software development for the cloud using java and AWS Developer Tools
Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture
Knowledge of cloud computing concepts and design considerations for AWS, Azure and GCP
2+ years of non academic experience in any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience

Preferred qualifications

Experience with Machine Learning and Large Language Model fundamentals, including architecture, training/inference lifecycles, and optimization of model execution, or experience leading and influencing your team or organization
Experience using AI to automate security assessment work flows, implement LLMs and perform agentic threat detection and remediation
Experience with AI-driven development and verification

About the team

At AWS Security Hub, security is central to maintaining customer trust and protecting customer cloud environments. Our organization is responsible for creating and maintaining a high bar for security analysis across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of customer environments.

3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
Bachelor's degree in computer science or equivalent
Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
Knowledge of networking protocols such as HTTP, DNS and TCP/IP
Knowledge of industry-based security vulnerabilities and remediation techniques
Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)
2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience
Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP
Experience with AWS products and services
Experience with programming languages such as Python, Java, C++
Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign‑on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

Qualifiche Preferenziali

2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience
Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP
Experience with AWS products and services
Experience with programming languages such as Python, Java, C++
Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

USA, MA, Boston - 159,300.00 - 202,400.00 USD annually

USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually

Get your free, confidential resume review.

or drag and drop your file here.