Senior Security Engineer, EPP Analytics

$143,300 - $247,600/Yr

Amazon - Herndon, VA

Full-time - Mid Level

Herndon, VA

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The Senior Security Engineer in the Amazon Security Enterprise Protection team is responsible for designing and building secure solutions to protect Amazon's internal network and customer data. This role involves collaborating with various teams to develop tools and services that monitor and respond to malicious activities, ensuring the safety of customers while addressing complex security challenges.

Responsibilities

• Collaborate with internal service teams, IT services teams, Risk Assessment, and Security Response teams to build detections and analytics that reduce insider risk.
• Provide deep security knowledge and experience to builder teams to enhance controls and audit capabilities.
• Develop detections and response plans to inform relevant personnel when anomalies occur.
• Lead complex and ambiguous projects while paying attention to team dynamics and contributions.
• Drive feedback and prioritization models to radically change the approach to security challenges.
• Conduct calibration and review exercises across teams to ensure a consistent approach to detections.

Requirements

• BS in computer science, computer security, networking, information systems, computer engineering, systems engineering, or similar field; or 5+ years' equivalent experience.
• 5+ years' experience in at least two areas: threat intelligence, security engineering, data mining, information security, security operations/incident response, cyber-crime investigations, fraud prevention, or cyber threat hunting.
• Proficiency in Python and familiarity with other programming languages (Go, Ruby, Shell/Bash scripting, Java, Javascript/TypeScript, Rust, etc.).
• 3-5+ years experience using SQL or other query languages.
• Ability to conduct technical research across several layers of the tech stack and automate tools.

Nice-to-haves

• Industry certifications or MS in a relevant field.
• Current knowledge of insider threat actors and their tactics, techniques, and procedures (TTPs).
• Familiarity with operating and building in cloud environments.

Benefits

• Flexible work hours and arrangements to support work-life harmony.
• Endless knowledge-sharing and training resources for career advancement.