Wireless Security Engineer II, Wireless Security

Amazon; Washington (IN); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

RSUs

Job summary

Amazon.com Services LLC is hiring a Security Engineer to design and operate cloud-based detection systems for wireless threats at scale.

You will transform RF telemetry and system logs into production detection logic, build data pipelines, and evolve AI-assisted workflows to reduce manual toil. You will own the detection engineering lifecycle, validate findings on-site when needed, and present analysis to leadership.

Qualifications

• 3+ years of security-related professional experience.
• 3+ years of experience in detection engineering, security data analysis, or security operations engineering.
• 1+ years of hands‑on experience with wireless security tools and concepts (e.g., RF capture, spectrum analysis, 802.11, Bluetooth).
• Experience with detection engineering and/or anomaly detection within security—writing detection logic, rules, or threat signatures.
• Experience with log aggregation and analysis platforms (Splunk, OpenSearch, ELK) or security data lakes.
• Experience directly working with cloud hosting technologies (AWS, Azure).
• Software engineering fundamentals with Python for tooling, automation, and data analysis.
• Experience applying threat modeling or other risk identification techniques.

Responsibilities

• Own the detection engineering lifecycle for wireless threats from design to production.
• Analyze large-scale security data — RF metadata, alarms, and sensor telemetry — to surface anomalies.
• Develop and refine data pipelines that ingest and enrich wireless telemetry.
• Lead investigations and remediation with cross-functional teams.
• Leverage AI-assisted workflows to automate data collection and triage.
• Conduct on-site wireless assessments when needed to validate detections.

Skills

Detection engineering

Cloud security

Python

Data analysis

Wireless security

Threat modeling

Security data lakes

Education

Bachelor's degree in CS/EE/Cybersecurity

Tools

Splunk

OpenSearch

ELK Stack

Job description

Description

Application deadline: Aug 28, 2026

The Amazon Wireless Security Assessments team delivers continuous wireless risk transparency for Amazon facilities. We build and operate detection and assessment capabilities that identify wireless threats across Amazon facilities.

We are hiring a Security Engineer who can build cloud-based detection systems for wireless threats at scale. This role combines working knowledge of wireless security with deep expertise in data telemetry, detection engineering, and security automation. If you're passionate about turning raw RF telemetry and system logs into production detection logic — and want to do it at global scale with AI-assisted tooling — this is the role for you.

What you'll do

You'll own the detection engineering lifecycle for wireless threats — designing, building, testing, and maintaining detection logic that runs against telemetry from Amazon facilities. You'll work with large-scale data: ingesting, transforming, and analyzing RF metadata, wireless IDS alerts, and sensor telemetry to surface anomalies and validate security posture. You'll develop data pipelines that turn noisy signals into clear, actionable security intelligence. You'll leverage and help evolve AI-assisted workflows where automation handles mechanical collection and triage, freeing you to apply expert judgment on what matters.

When on-site validation is needed, you'll conduct targeted wireless assessments — applying working knowledge of RF fundamentals and wireless protocols to capture and analyze signals, validate detection hypotheses, and confirm findings in the physical environment.

You'll author risk-calibrated findings, educate partner teams, drive remediation, and present analysis to senior leadership and stakeholders. You'll build tools — detection rules, data pipelines, and automation — that scale the team's ability to maintain continuous wireless risk visibility.

The candidate should have strong detection engineering and data analysis skills, working familiarity with wireless security, and comfort operating in cloud-native environments. They should demonstrate sound judgment under ambiguity, be outcome-oriented, and embody Ownership, Bias for Action, and Dive Deep.

The role requires up to 50% travel within and outside the United States.

This position requires that the candidate selected be a US Citizen.

Key job responsibilities

• Design, build, test, and maintain cloud-based detection logic for wireless security threats using telemetry from distributed sensor systems and enterprise security tooling
• Analyze large-scale security data — RF metadata, wireless IDS alerts, syslog, and custom sensor telemetry — to identify anomalies, trends, and security issues
• Develop and refine data pipelines that ingest, normalize, and enrich wireless telemetry for continuous assessment and detection
• Own wireless security investigations from framing through outcome delivery
• Leverage and improve AI-assisted workflows — working alongside automation tooling for data collection, triage, and pattern recognition
• Conduct targeted on-site wireless assessments when physical validation is required, using wireless capture and analysis tools across relevant protocols
• Author risk-calibrated findings and drive remediation with facility owners and partner teams
• Build tools and automation that increase the team's detection coverage and operational efficiency
• Present findings, briefs, and analysis to senior leadership, internal departments, and stakeholders
• Engage with partner teams to understand security concerns and educate on wireless security topics

A day in the life

You start your morning reviewing detection performance — checking for alerts that fired overnight, tuning a rule that's generating noise, and investigating an anomalous telemetry pattern flagged for your review. You write a new detection for a wireless protocol behavior you researched last week, validate it against historical data, and push it to production. After lunch, you work on improving a data pipeline that normalizes sensor telemetry from a newly deployed site, then pair with a teammate to refine triage logic in an automated workflow. Later in the week, you might fly to a facility to validate a detection hypothesis with hands‑on RF capture — confirming what the data told you, or discovering what it missed.

About The Team

The Wireless Security Assessments team provides wireless risk transparency across Amazon facilities. We integrate AI-assisted workflows into our operating model so engineers focus on judgment and outcomes rather than mechanical data collection. We are a small, high‑autonomy team within a larger global security organization.

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

Basic Qualifications

• 3+ years of security-related professional experience
• 3+ years of experience in detection engineering, security data analysis, or security operations engineering
• 1+ years of hands‑on experience with wireless security tools and concepts (e.g., wireless packet capture, spectrum analysis, WIDS, or wireless protocol analysis across 802.11, Bluetooth, IoT, or cellular)
• Experience with detection engineering and/or anomaly detection within security — writing detection logic, security rules, or threat signatures for production monitoring systems
• Experience with log aggregation and analysis platforms (e.g., Splunk, OpenSearch, ELK, or equivalent) or security data lakes
• Experience directly working with cloud hosting technologies (AWS, Azure, etc.)
• Software engineering fundamentals with proficiency in Python (or similar) for tooling, automation, and data analysis
• Experience applying threat modeling or other risk identification techniques

Preferred Qualifications

• Experience with AWS products and services (S3, Athena, Lambda, CloudWatch, Kinesis, or equivalent)
• Experience building detection‑as‑code frameworks or custom detection pipelines
• Experience with LLM‑assisted security workflows, agentic orchestration, or AI‑augmented security operations (e.g., automated triage, enrichment pipelines, agent‑based task execution)
• Experience building data pipelines for security telemetry (ingestion, normalization, enrichment, alerting)
• Experience with software‑defined radios and RF signal analysis
• Experience with wireless intrusion detection systems (WIDS) or continuous monitoring platforms
• Knowledge of security telemetry across 2+ domains (e.g., hosts, networks, cloud, physical security, wireless)
• Experience with multiple wireless protocols: 802.11, Bluetooth, IoT (Zigbee, LoRa), Cellular (2G‑5G), two‑way radio systems
• Experience with threat intelligence, threat hunting, or attacker tradecraft frameworks (e.g., MITRE ATT&CK)
• Bachelor's degree in computer science, electrical engineering, cybersecurity, or equivalent experience

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign‑on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CA, Virtual Location - California - 159,300.00 - 202,400.00 USD annually

USA, CO, Virtual Location - Colorado - 159,300.00 - 202,400.00 USD annually

USA, MD, Virtual Location - Maryland - 159,300.00 - 202,400.00 USD annually

USA, MN, Virtual Location - Minnesota - 159,300.00 - 202,400.00 USD annually

USA, TX, Virtual Location - Texas - 159,300.00 - 202,400.00 USD annually

USA, VA, Virtual Location - Virginia - 159,300.00 - 202,400.00 USD annually

USA, WA, Virtual Location - Washington - 159,300.00 - 202,400.00 USD annually

Company

Amazon.com Services LLC

Job ID: A10490435