Security Engineer II — Threat Detection (GuardDuty)

Amazon Web Services (AWS); Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Development Center U.S., Inc. is seeking a Security Engineer for Amazon GuardDuty, a managed threat detection service monitoring AWS accounts and workloads.

You will research, tune and validate detection mechanisms, mentor data scientists and engineers, and help protect cloud-based resources at scale. The role focuses on researching attack patterns, building attack simulations, and interfacing with internal security teams to stay ahead of evolving threats.

Qualifications

• Bachelor's degree in computer science or equivalent
• 2+ years IT Security experience or STEM degree
• Knowledge of HTTP, DNS, TCP/IP
• 2+ years of scripting, programming, or security code review in Python/Java/C++

Responsibilities

• Recognize and safely utilize attacker tools, tactics and procedures
• Develop scripts, tools or methodologies to enhance red team capabilities
• Work with data scientists to help develop and test detections for complex exploitation patterns
• Build simulations to validate tools and techniques
• Advise broader team on current threat landscape, tools & techniques
• Ability to detonate and analyze behavioral patterns of malware
• Create Intellectual Property, influence others while demonstrating significant creativity

Job description

Amazon Development Center U.S., Inc. is seeking a Security Engineer for Amazon GuardDuty, a managed threat detection service monitoring AWS accounts and workloads.

You will research, tune and validate detection mechanisms, mentor data scientists and engineers, and help protect cloud-based resources at scale. The role focuses on researching attack patterns, building attack simulations, and interfacing with internal security teams to stay ahead of evolving threats.