Security Engineer, Amazon

• If you are someone who enjoys researching threats, diving deep into large datasets, and building innovative capabilities to solve everyday problems, we’d like to meet you
• BS in Computer Science, Cyber Security, or a related field of study or 6+ years of equivalent professional experience
• 3+ years of demonstrated experience in areas such as threat hunting, incident response, systems security, network security, or a related field
• Proficiency in one or more scripting language (e.g. Python, Bash, PowerShell, Perl, etc.)

Desirable

• Amazon’s Threat Hunting team is looking for a Security Engineer, Threat Hunting who is excited by the idea of searching for and uncovering undetected threat activities at petabyte scale
• In this role, you will work alongside other Threat Hunting engineers to proactively identify and eliminate threats wherever they may exist
• Our Threat Hunting team hunts for adversarial activity using a variety of tools, methods, intelligence, and techniques
• They work hands-on with security logs and are encouraged to be creative and develop innovative techniques to illuminate threat activities
• With your technical expertise, you will be solving security challenges at scale and working to protect applications powering the most sophisticated e-Commerce platform ever built
• Your work will be essential to maintaining customer trust and delivering a delightful experience for our customers
• You will query and collate machine data to search for evidence of potentially damaging threat activities which pose a risk to Amazon customers and data
• You will work alongside incident responders and support the investigation of ongoing security issues
• You will reconstruct security events from log data and develop innovative approaches to identify threat actor tactics, techniques, and procedures (TTPs)
• You will build custom capabilities to uncover threats and enable threat hunting operations at scale
• You will participate in an on-call rotation and provide ad hoc support to customers during non-business hours
• Query, collate, and analyze machine-generated data for indications of cyber threat activities
• Develop recurring database searches to extract security artifacts from large and diverse datasets
• Work alongside other engineers to improve security and reduce operating risk for our customers
• Monitor cybersecurity media, blog posts, and other sources to maintain awareness of the threat landscape
• Assist in the development of innovative capabilities to identify cyber threats at scale
• Work individually and/or as a team on high priority security issues
• Our threat hunters also work alongside incident response engineers to support ongoing security investigations