Security Intelligence Engineer - Threat Intel & Automation

Amazon; Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Security is seeking a Security Intelligence Engineer to analyze actor TTPs and generate actionable threat intelligence across AWS, Ads, and other ecosystems.

You will harness large, unstructured data, perform question-driven analysis, and develop analytics to automate detection and mitigation. US Citizenship is required; you will participate in on-call rotations and collaborate with cross-team groups to enhance threat visibility.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience.
• Bachelor's degree in computer science or equivalent.
• 3 years experience with tracking high-sophistication cyber threat groups.

Responsibilities

• Perform deep dive analysis of malicious artifacts.
• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities.
• Create security techniques and automation for internal use that enable you to operate at high speed and broad scale.
• Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats.
• Draft and publish finished written threat intelligence products based on findings.
• Periodic on-call responsibilities.

Skills

Python

Go

Java

C++

Threat analysis

Education

Bachelor's degree in computer science or equivalent

Tools

AWS

Job description

Amazon Security is seeking a Security Intelligence Engineer to analyze actor TTPs and generate actionable threat intelligence across AWS, Ads, and other ecosystems.

You will harness large, unstructured data, perform question-driven analysis, and develop analytics to automate detection and mitigation. US Citizenship is required; you will participate in on-call rotations and collaborate with cross-team groups to enhance threat visibility.