Threat Detection Security Engineer, Amazon

• Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support
• Experience scripting with Python, Perl, Bash or PowerShell
• 1+ years of non academic experience in any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience

Desirable

• As a Security Engineer on TD, you will research emerging-threats to extract new detection ideas and build high confidence detections that proactively identify threats across log data at exabyte scale
• You will work closely with Incident Response, Threat Hunting, Threat Intelligence, and Red team to obtain threat models of known threats to deliver detections enabling rapid response
• TD will also look to see you develop innovative methods utilizing the latest techniques to rapidly detect threats at scale
• Your expertise will be used to defend the data of Amazon's millions of customers against the most critical threats
• Identify critical threats on Amazon's network and deliver high fidelity threat detections
• Enhance detection engineering processes to improve the detection engineering lifecycle
• Develop platform requirements used to enrich alerts, and automate remediation and response actions
• Research and develop mechanisms across to enhanceMachine-Learning, advanced data correlation, risk-based alerting, or Generative AI
• Provide tactical detection support during security incidents
• Automate your way through challenges using Python or other scripting language