Security Engineer II, Threat Hunting, Security Incident Response Team (SIRT)

Amazon.com, Inc.•Arlington, VA

52d

About The Position

Amazon Security is looking for an experienced Security Engineer who is excited by the idea of searching for undetected threat activities at petabyte scale. In this role, you will work alongside a team of world class security practitioners and develop novel threat detection and mitigation strategies. Our Threat Hunting team hunts for adversarial activity using a variety of tools, methods, intelligence, and techniques. The team is hands-on with security data and is known for developing innovative solutions to common security problems. Our threat hunting engineers are builders as much as they are security engineers, and as a member of this team, you will solve security challenges at scale and work to protect one of the most sophisticated e-Commerce platforms ever built. If you are someone who enjoys researching threats, diving deep into large datasets, and developing novel solutions to common security problems, we would like to meet you. Your work will be essential to delighting our customers and maintaining their vital trust. Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Requirements

Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+
3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent

Nice To Haves

Experience authoring complex threat detection mechanisms
Experience working with large datasets and distributed computing architectures
Direct hands-on experience in an Incident Response role or working alongside an Incident Response organization in a direct-support capacity
Experience investigating security incidents involving Cloud, Container, and Endpoint (Windows/Linux/MacOS) environments

Responsibilities

You will query, collate, and evaluate machine-generated data for evidence of potentially damaging activities which could pose a risk to Amazon customers and data.
You will work alongside our global incident response team and participate in the scoping and analysis of complex security issues.
You will evaluate threat actor tactics, techniques, and procedures (TTPs) for threat detection opportunities.
You will design, develop, and deploy early-stage threat detection mechanisms and partner with Threat Detection engineers to establish durable and long-term coverage.
You will develop metrics and implement solutions to derive operational insights from custom capabilities.
You will identify opportunities to automate repetitive processes and generate efficiencies for multiple teams.
You will participate in an on-call rotation and provide ad hoc support to customers during non-business hours, when required.

Benefits

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture.
When we feel supported in the workplace and at home, there's nothing we can't achieve.
Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness.
Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits.
For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume