Threat Detection & Correlation Engineer for Security Hub

Socket.dev; Boston (MA); On-site; USD 159,300 - 202,400; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon is seeking a highly motivated Security Engineer to advance threat detection, correlation, and response at scale for AWS Security Hub. You will research threats, develop markers, and build rules across large-scale data sources to improve visibility and defense for customers on AWS and other clouds.

You will work with security, engineering, and product teams to shape analysis, leverage ML/LLM capabilities, and automate responses.

Qualifications

• 3+ years programming in Python, Ruby, Go, Java, Swift, .Net, C++ or similar
• 2+ years scripting and security code review in a non-internship
• 2+ years troubleshooting logs and automating tasks via command line

Responsibilities

• Research emerging threats to develop new detection ideas
• Build high-confidence markers and rules to correlate criticality across data sources
• Collaborate with engineering and product teams to shape analysis and visibility into threats and vulnerabilities
• Develop methods to analyze detections at scale

Skills

Python

Go

Java

Linux/Unix

Cloud concepts

Threat modeling

Scripting

Education

Bachelor's degree in computer science or equivalent

Bachelor's degree in STEM or IT Security related field

2+ years IT Security experience

Tools

AWS Developer Tools

Linux command line tools

Job description

Amazon is seeking a highly motivated Security Engineer to advance threat detection, correlation, and response at scale for AWS Security Hub. You will research threats, develop markers, and build rules across large-scale data sources to improve visibility and defense for customers on AWS and other clouds.

You will work with security, engineering, and product teams to shape analysis, leverage ML/LLM capabilities, and automate responses.