Threat Intelligence Engineer – Actionable Security Analytics

Amazon; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com Services LLC's TIGER team seeks a Security Intelligence Engineer to analyze indicators and generate actionable intelligence on threats to Amazon employees and assets. You will develop analytic techniques and collaborate across teams to enhance threat detection, leveraging networking- and host-based indicators, digital forensics, and database querying.

The role requires 3+ years in programming (Python, Java, C++, or similar), plus 2+ years in scripting and incident analysis.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language experience.
• 2+ years of scripting, programming, and security code review in a common language (non-internship).
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.

Responsibilities

• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities.
• Create security techniques and automation for internal use that enable you to operate at high speed and broad scale.
• Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats.
• Perform deep dive analysis of malicious artifacts.
• Draft and publish finished written threat intelligence products based on findings.

Skills

Python

Java

C++

Go

Swift

Ruby

.NET

Scripting

Networking

AWS experience

Education

Bachelor's degree in STEM

Tools

AWS

Git

Job description

Amazon.com Services LLC's TIGER team seeks a Security Intelligence Engineer to analyze indicators and generate actionable intelligence on threats to Amazon employees and assets. You will develop analytic techniques and collaborate across teams to enhance threat detection, leveraging networking- and host-based indicators, digital forensics, and database querying.

The role requires 3+ years in programming (Python, Java, C++, or similar), plus 2+ years in scripting and incident analysis.