Threat Detection & Response Engineer — Security Hub

Amazon; Boston, Northern (MA, KY); Hybrid; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

401(k) matching

Paid time off

Job summary

Amazon's AWS Security Hub team in Boston is seeking a Security Engineer to advance threat detection, correlation and response at scale across AWS and other cloud environments. You will research emerging threats, develop high‑confidence markers and rules, and collaborate with engineers to shape analysis and visibility for customers.

This role requires experience in threat modeling, scripting (Python, Bash, or PowerShell), cloud development with Java and AWS tools, and deep knowledge of

Qualifications

• Experience evaluating threats and vulnerabilities, assigning criticality based on impact.
• Experience scripting with Python, Perl, Bash or PowerShell.
• Experience with software development for the cloud using Java and AWS Developer Tools.
• Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture.
• Knowledge of cloud computing concepts and design considerations for AWS, Azure and GCP.
• 2+ years of non academic experience in threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience.

Responsibilities

• Research emerging threats to develop criticality and posture management ideas.
• Build high-confidence markers and rules that correlate criticality across conditions from data sources.
• Collaborate with engineering and product teams to shape the analysis, context and inference that drive visibility into threats and vulnerabilities.

Skills

Threat modeling

Python scripting

Cloud development

Security automation

Networking knowledge

Log analysis

Education

Bachelor's degree in computer science or equivalent

Tools

Java

AWS Developer Tools

Linux/Unix tools

Linux/Unix

Job description

Amazon's AWS Security Hub team in Boston is seeking a Security Engineer to advance threat detection, correlation and response at scale across AWS and other cloud environments. You will research emerging threats, develop high‑confidence markers and rules, and collaborate with engineers to shape analysis and visibility for customers.

This role requires experience in threat modeling, scripting (Python, Bash, or PowerShell), cloud development with Java and AWS tools, and deep knowledge of