Threat Intelligence Engineer – Incident Response

Amazon; Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

Job summary

Amazon is seeking a Security Intelligence Engineer, Incident Response Threat Intelligence, ACTI, to analyze indicators and generate actionable intelligence. You will develop analytic techniques, perform question-driven analysis, and investigate incidents using networking, forensics, and database querying.

The role requires a deep understanding of cyber threat actors and TTPs, with on-call duties and collaboration across teams to mitigate threats and support defenses across Amazon's ecosystem.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)

Responsibilities

• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities
• Create security techniques and automation for internal use that enable you to operate at high speed and broad scale
• Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats
• Perform deep dive analysis of malicious artifacts
• Draft and publish finished written threat intelligence products based on findings
• Periodic on-call responsibilities

Skills

Python

Go

Java

C++

Ruby

Education

Bachelor's degree in STEM

3+ years IT Security experience

Tools

AWS

Job description

Amazon is seeking a Security Intelligence Engineer, Incident Response Threat Intelligence, ACTI, to analyze indicators and generate actionable intelligence. You will develop analytic techniques, perform question-driven analysis, and investigate incidents using networking, forensics, and database querying.

The role requires a deep understanding of cyber threat actors and TTPs, with on-call duties and collaboration across teams to mitigate threats and support defenses across Amazon's ecosystem.