Security Engineer Insider Threat, Amazon

• Experience in one or more of the following domains: Behavioral Science, Information Analyst, Security Operations such as Security Engineering or Network Security
• Understanding of best practices across multiple security disciplines/domains
• 2+ years of experience in querying databases and log storage systems
• 2+ years of experience in relevant domains such as risk assessments, internet-based risk, abuse, fraud, data protection, or security

Desirable

• Devices Subsidiaries & Acquisitions Security is looking for a qualified Security Engineer to join our Insider Threat Detection & Response program
• This individual will work closely with multiple teams across Amazon Key, Blink, Ring, Sidewalk & eero
• The Insider Threat program feeds behavioral studies from our risk assessments and threat narratives into actionable risk detections across Adversarial Threat, Business Operations, Enterprise Security Risk Management, Incident Response, and our Fraud team to help prevent internally facing risk
• Construct security threat narratives with production service owners, to help identify dynamic high-risk business activity and associated security risks
• Synthesize information from multiple data streams to identify potential risks to sensitive company information
• Create simulated threat actor profiles to ascertain if tools are accurately detecting simulated malicious & negligent activity
• Develop Standard Operating Procedures & Playbooks for alerts
• The Insider Threat team works closely with both product and service teams across Amazon Key, Blink, Ring, Sidewalk & eero. Our goal is to a protect the organization and our customer data from internalized risks
• We are committed to solve for adaptive, technical challenges, developing business processes, policies, controls & training aimed at preventative measures
• Our main priority is to monitor various detection intelligence streams, evaluate, triage, & investigate behavioral anomalies
• Our team work with multidisciplinary stakeholders to improve detection efforts, investigation processes, and develop standard operating procedures (SOPs)