Threat Intelligence Lead, Buyer Risk Unit

Amazon; Seattle (WA); On-site; USD 83,000 - 130,000; Full time

Job summary

Amazon is seeking a Threat Intelligence Analyst to establish a new intelligence function within Buyer Risk Prevention. The role involves proactive collection from the dark web, profiling threat actors, and delivering actionable intelligence to drive detection rules and ML updates.

You will lead a team, partner with ML, Risk, Engineering, Legal, and Law Enforcement, and provide real-time alerts while shaping investigation methodology and tooling workflows for the BTIU.

Qualifications

• Experience with OSINT approaches and investigative research techniques.
• Background in cyber threat intelligence, fraud investigations, or risk analysis.
• Ability to handle confidential information with discretion.
• 5+ years in cyber threat intelligence, fraud investigations, risk analysis, or cybercrime research.
• Familiarity with fraud ecosystems and threat actor patterns.

Responsibilities

• Monitor and analyze dark web marketplaces, forums, and encrypted channels for Amazon threats.
• Profile, track, and document threat actors and fraud rings targeting Amazon buyers.
• Produce monthly fraud MO investigations with attribution, indicators, and business impact.
• Lead tradecraft, security standards, and tooling workflows for the BTIU team.
• Mentor analysts and build independent investigation capability across the team.
• Collaborate with ML, Risk, Engineering, Legal, and Law Enforcement to operationalize findings.
• Establish referral pathways with Legal and external law enforcement.
• Issue real-time alerts for active exploitation campaigns to enable rapid response.
• Drive adoption of intelligence platforms and build enrichment pipelines.

Skills

OSINT methodologies

Fraud investigations

Cyber threat intelligence

Risk analysis

Discretion

Experience 5+ years

Tools

Flashpoint

Recorded Future

Maltego Enterprise

Job description

Amazon is seeking a Threat Intelligence Analyst to establish a new intelligence function within Buyer Risk Prevention. The role involves proactive collection from the dark web, profiling threat actors, and delivering actionable intelligence to drive detection rules and ML updates.

You will lead a team, partner with ML, Risk, Engineering, Legal, and Law Enforcement, and provide real-time alerts while shaping investigation methodology and tooling workflows for the BTIU.