Security Engineer II — Cloud Threat Detection & Red Team

Socket.dev; Boston (MA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon GuardDuty is a managed threat detection service that protects AWS workloads by continuously monitoring for malicious or unauthorized behavior. The Security Engineer on this team researches, tunes and validates detection mechanisms at scale, collaborating with data scientists and engineers.

You will build attack simulations, perform active testing, and mentor teammates while staying ahead of evolving threats. This role demands deep security acumen and strong CS fundamentals.

Qualifications

• Bachelor's degree in computer science or equivalent.
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Responsibilities

• Recognize and safely utilize attacker tools, tactics and procedures.
• Develop scripts, tools or methodologies to enhance red team capabilities.
• Work with data scientists to help develop and test detections for complex exploitation patterns.
• Build simulations to validate tools and techniques.
• Advise broader team on current threat landscape, tools & techniques.
• Ability to detonate and analyze behavioral patterns of Malware.
• Create Intellectual Property, influence others while demonstrating significant creativity and being vocally self-critical.

Skills

Python

Java

C++

Networking protocols

CLI tools

Education

Bachelor's in Computer Science or equivalent

Bachelor's in STEM or 2+ years IT Security

Tools

AWS

Job description

Amazon GuardDuty is a managed threat detection service that protects AWS workloads by continuously monitoring for malicious or unauthorized behavior. The Security Engineer on this team researches, tunes and validates detection mechanisms at scale, collaborating with data scientists and engineers.

You will build attack simulations, perform active testing, and mentor teammates while staying ahead of evolving threats. This role demands deep security acumen and strong CS fundamentals.