Security Engineer I, Threat Hunting, Security Incident Response Team (SIRT)

Amazon is seeking a Security Engineer I to join their Threat Hunting team, focusing on identifying and mitigating undetected threat activities at scale. In this role, you will collaborate with other engineers to analyze security data, support incident response efforts, and develop innovative threat detection strategies.

What you'll do:

• You will query big data repositories to identify threat activities which pose a risk to Amazon customers and data
• You will work alongside incident response teams and provide direct support to ongoing investigations and efforts to identify and contain security events
• You will analyze security log data, identify threat behaviors, and develop custom threat detection and threat hunting strategies
• You will author scripts and build custom capabilities to uncover threats and enable threat hunting operations at Petabyte scale
• You will participate in an on-call rotation and provide ad hoc support to internal customers during non-business hours
• Query, collate, and analyze machine-generated data for indications of digital threat activities
• Develop database searches to extract security artifacts and threat signals from large and diverse datasets
• Work alongside other engineers to improve security and reduce operating risk for our customers
• Monitor cybersecurity media, blog posts, and other sources to maintain awareness of the threat landscape
• Assist in designing and developing innovative capabilities to identify cyber threat activities at scale
• Work individually and/or as a team on high priority security issues

What they're looking for:

• 2+ years of web protocols, common security attacks, and remediation (non-internship) experience
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance
• Experience with AWS services or other cloud offerings

Benefits:

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave