Senior Security Software Engineer, Amazon

• Bachelor’s degree in Computer Science, Computer Engineering, Information Assurance, Cybersecurity, Electrical and Computer Engineering or relevant/equivalent experience working in Information Security
• 7+ years working within Information Security supporting/performing incident response, Red Teaming, threat hunting, threat intelligence, forensics, or similarly related experience
• Ability to craft detailed intelligence reports
• 5+ years of experience developing and producing threat analysis products (technical and/or non-technical) for customers
• 3+ years scripting/programming experience, e.g., Python, C, C++, Java, Ruby, and/or PowerShell
• 3+ year experience with SQL or other query languages, e.g., SQL, SparkQL, GraphQL
• 3+ year experience with Kubernetes and AWS EKS
• Knowledge of current security trends, threats and mitigations
• Demonstrated experience with analytical tools and processes
• Have presented threat intelligence at security conferences
• Understanding of industry standard threat frameworks (Lockheed Martin Cyber Kill Chain, Diamond Model, MITRE ATT&CK)

Desirable

• The Amazon Security Threat Intelligence team is responsible for investigating and understanding threat actors that are targeting Amazon’s businesses
• As a Security Intelligence Engineer, you will support the daily operation of our threat intelligence program, specifically focused around automation and building out systems like the threat intelligence platform and malware analysis pipeline
• This role will work to understand threat actors and malware authors from all parts of the threat actor spectrum from APT to general cybercrime
• Your skills in malware analysis, threat research, report writing and automation will be crucial for our threat intelligence team
• In this role, you will provide analysis and support for emerging threats, threat actors and their associated malware targeting Amazon and Amazon Subsidiaries
• . You will coordinate with other Security Engineers to provide actionable intelligence to other security engineering teams including Incident Response, Threat Hunting, and Red Team adversarial simulations
• You’ll be a critical part of an organization focused on influencing the security culture within Amazon, with the ultimate goal of ensuring the continued safety and security of our customers
• Collect, analyze, and author threat intelligence reports covering new threats, vulnerabilities and malware
• Using Python or similar scripting languages to automate tasks and manipulate data
• Collaborate on developing, implementing, and maintaining our threat intelligence platform and related tooling as it pertains to malware, malware analysis, and malware handling systems
• Ability to write automation to aid in malware analysis or design systems to assist in handling malware, such as sandboxes
• Provide situational awareness on the current threat landscape and the TTPs associated with specific threats to our business, including ongoing malware campaigns
• Demonstrate practical knowledge managing threat data and creating intelligence assessments in support of our incident response & threat hunting missions
• Collect data from intelligence communities, threat intelligence platforms, open source data repositories, and other sources to analyze TTPs and anomalies
• Conduct detailed technical analysis supported by industry accepted threat intelligence analytical frameworks, tools, and standards. Familiarity with building basic detections based off technical analysis (yara, snort, etc)
• Provide timely, relevant, and proactive analysis across Amazon and subsidiaries