Threat Intelligence Engineer: Security & Automation

Socket.dev; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon's Threat Intelligence for Global Enterprise Response (TIGER) team, part of ACTI, seeks a Senior Security Intelligence Engineer to analyze indicators and generate actionable intelligence for incident response, red teams, and detections teams.

You will develop analytic techniques, leverage networking- and host-based indicators, perform deep-dive analyses of artifacts, and publish finished threat intelligence products.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 3+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)

Responsibilities

• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities.
• Create security techniques and automation for internal use that enable you to operate at high speed and broad scale.
• Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats.
• Perform deep dive analysis of malicious artifacts.
• Draft and publish finished written threat intelligence products based on findings.
• Periodic on-call responsibilities.

Skills

Python

Java

C++

Security coding

Scripting

Education

Bachelor's degree in STEM

3+ years IT Security experience

Job description

Amazon's Threat Intelligence for Global Enterprise Response (TIGER) team, part of ACTI, seeks a Senior Security Intelligence Engineer to analyze indicators and generate actionable intelligence for incident response, red teams, and detections teams.

You will develop analytic techniques, leverage networking- and host-based indicators, perform deep-dive analyses of artifacts, and publish finished threat intelligence products.