Security Intelligence Engineer: Threat Analytics & Automation

Amazon; Arlington (VA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

RSU program

Job summary

Amazon’s TIGER team seeks a Security Intelligence Engineer to analyze indicators and generate actionable threat intelligence. You will develop analytic techniques, leverage host-based indicators and forensics, and work across teams to drive capabilities. US citizenship is required for this position.

You will perform deep threat investigations, draft intelligence products, and contribute to incident response and detections efforts while collaborating with incident responders and red teams.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship).
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship).
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Experience with security code review in a common language (non-internship).

Responsibilities

• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities.
• Create security techniques and automation for internal use that enable you to operate at high speed and broad scale.
• Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats.
• Perform deep dive analysis of malicious artifacts.
• Draft and publish finished written threat intelligence products based on findings.
• Periodic on-call responsibilities.

Skills

Python

Scripting

Networking concepts

Threat analysis

Education

Bachelor's degree in STEM

3+ years IT Security experience

Tools

AWS

Security tooling

Job description

Amazon’s TIGER team seeks a Security Intelligence Engineer to analyze indicators and generate actionable threat intelligence. You will develop analytic techniques, leverage host-based indicators and forensics, and work across teams to drive capabilities. US citizenship is required for this position.

You will perform deep threat investigations, draft intelligence products, and contribute to incident response and detections efforts while collaborating with incident responders and red teams.