Threat Intelligence Engineer - Automate & Insight Security

Amazon; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon's Threat Intelligence for Global Enterprise Response (TIGER) team is seeking a Security Intelligence Engineer to analyze indicators and generate actionable intelligence. You will help enhance analytic capabilities by formulating new techniques and collaborating across incident response, detections, and red teams to mitigate threats.

The role requires deep understanding of current cyber threats, TTPs, and experience with networking/host indicators, forensics, and database querying.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 3+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)

Responsibilities

• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities.
• Create security techniques and automation for internal use that enable you to operate at high speed and broad scale.
• Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats.
• Perform deep dive analysis of malicious artifacts.
• Draft and publish finished written threat intelligence products based on findings.
• Periodic on-call responsibilities.

Skills

Python

Java

Go

C++

Ruby

Education

Bachelor's degree in STEM

3+ years IT Security experience

Job description

Amazon's Threat Intelligence for Global Enterprise Response (TIGER) team is seeking a Security Intelligence Engineer to analyze indicators and generate actionable intelligence. You will help enhance analytic capabilities by formulating new techniques and collaborating across incident response, detections, and red teams to mitigate threats.

The role requires deep understanding of current cyber threats, TTPs, and experience with networking/host indicators, forensics, and database querying.