Security Engineer II: Cloud Threat Detection & Red Team

Amazon; New York (NY); On-site; USD 159,000 - 213,000; Full time

Benefits offered by this job

Health insurance

Job summary

Amazon GuardDuty seeks a Security Engineer to join an advanced threat-detection team. You will research attack patterns, build simulations and mentor data scientists and software engineers to improve detection capabilities.

This role requires exploiting at scale, identifying misconfigurations in cloud resources, and communicating complex findings clearly. A strong CS foundation and hands-on security experience are essential for success.

Qualifications

• Bachelor's degree in computer science or STEM field (or 2+ years IT Security experience)
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques
• 2+ years of scripting, programming, or security code review in Python/Java/C++
• Experience with AWS products and services

Responsibilities

• Recognize and safely utilize attacker tools, tactics and procedures
• Develop scripts, tools or methodologies to enhance red team capabilities
• Work with data scientists to help develop and test detections for complex exploitation patterns
• Build simulations to validate tools and techniques
• Advise broader team on current threat landscape, tools and techniques
• Ability to detonate and analyze behavioral patterns of Malware
• Create Intellectual Property and influence others with creativity

Skills

Red team testing

Scripting / programming

Networking protocols

AWS experience

Education

Bachelor's degree in CS or STEM

2+ years IT Security experience

Tools

Python

Java

C++

Command line tools

AWS services

Job description

Amazon GuardDuty seeks a Security Engineer to join an advanced threat-detection team. You will research attack patterns, build simulations and mentor data scientists and software engineers to improve detection capabilities.

This role requires exploiting at scale, identifying misconfigurations in cloud resources, and communicating complex findings clearly. A strong CS foundation and hands-on security experience are essential for success.