Security Engineer II — Cloud Threat Detection (GuardDuty)

Amazon Inc.; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs & Sign-on

Paid time off

401(k) matching

Job summary

Amazon Development Center U.S., Inc. is seeking an experienced Security Engineer for the GuardDuty service to research, tune, and validate detection mechanisms at cloud scale. You will work with engineers to explore attack patterns, build simulations, and mentor data scientists and software engineers.

The role emphasizes red team penetration testing skills, innovation, and collaboration with internal security teams to stay ahead of evolving threats across AWS resources.

Qualifications

• Bachelor's degree in CS or equivalent.
• STEM degree or 2+ years IT Security experience.
• Knowledge of networking protocols and vulnerabilities.

Responsibilities

• Recognize attacker tools and procedures and use them safely.
• Develop scripts or methodologies to enhance red team capabilities.
• Collaborate with data scientists to test detections for exploitation patterns.
• Build simulations to validate tools and techniques.
• Advise team on current threat landscape, tools and techniques.
• Analyze malware behavior patterns and content for research.
• Create IP and demonstrate creative, critical thinking.

Skills

Red team experience

Threat detection

Mentoring

Education

Bachelor's degree in computer science or equivalent

Bachelor's degree in STEM (Science, Technology, Engineering, Mathematics)

2+ years IT Security experience

Tools

Python

Java

C++

AWS

Job description

Amazon Development Center U.S., Inc. is seeking an experienced Security Engineer for the GuardDuty service to research, tune, and validate detection mechanisms at cloud scale. You will work with engineers to explore attack patterns, build simulations, and mentor data scientists and software engineers.

The role emphasizes red team penetration testing skills, innovation, and collaboration with internal security teams to stay ahead of evolving threats across AWS resources.