Security Engineer, Correlation and Response, AWS Security Hub
Job Location:
Job Location:
Boston, NH - USA
Monthly Salary:
Not Disclosed
Monthly Salary:
Posted on:
5 hours ago
Posted on:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
Are you excited about advancing the state of threat detection correlation and response at scale to mitigate risk from an ever-evolving threat landscape for a diverse range of customers
The AWS Security Hub team is looking for a highly motivated Security Engineer to join our this role you will research emerging threats to develop new criticality and posture management ideas and build high-confidence markers and rules that correlate criticality across a diverse set of conditions from large-scale data sources. You will work closely with engineering and product teams to shape the analysis context and inference that drive visibility into the most critical threats and vulnerabilities for AWS customers operating on AWS and other cloud providers. You will also develop innovative methods utilizing the latest techniques to analyze detections at scale. Your expertise will help defend the data of Amazons millions of customers against the most critical threats.
Key job responsibilities
Basic qualifications
- Experience evaluating threats and vulnerabilities assigning criticality based on impact and developing response automation
- Experience scripting with Python Perl Bash or PowerShell
- Experience with software development for the cloud using java and AWS Developer Tools
- Knowledge of web protocols common attacks and Linux/Unix tools and architecture
- Knowledge of cloud computing concepts and design considerations for AWS Azure and GCP
- 2 years of non academic experience in any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
Preferred qualifications
- Experience with Machine Learning and Large Language Model fundamentals including architecture training/inference lifecycles and optimization of model execution or experience leading and influencing your team or organization
- Experience using AI to automate security assessment work flows implement LLMs and perform agentic threat detection and remediation
- Experience with AI-driven development and verification
A day in the life
Most days youll be heads-down building and tuning evaluations digging into resource analysis and log data to figure out what data markers looks like and how to reliably assess impact. Youll spend time reading up on the latest threats and turning that research into something actionable. Youll also work on advancing how we assess threats whether thats prototyping new approaches using machine learning or generative AI improving enrichment pipelines or finding ways to scale what we do. Its a mix of deep technical work and close collaboration with security teams across the organization.
About the team
At AWS Security Hub security is central to maintaining customer trust and protecting customer cloud environments. Our organization is responsible for creating and maintaining a high bar for security analysis across all of Amazons products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of customer environments.
- 3 years of programming in Python Ruby Go Swift C or similar object oriented language experience
- 2 years of scripting programming and security code review in a common programming language (non-internship) experience
- 2 years of troubleshooting systems issues analyzing logs or automating basic tasks using command line tools (non-internship) experience
- Bachelors degree in computer science or equivalent
- Bachelors degree in a STEM field (Science Technology Engineering Mathematics) or experience in IT Security
- Bachelors degree in a STEM field (Science Technology Engineering Mathematics) or 2 years of IT Security experience
- Knowledge of networking protocols such as HTTP DNS and TCP/IP
- Knowledge of industry-based security vulnerabilities and remediation techniques
- Experience in scripting programming and security code reviewing in a common programming language (non-internship)
- Experience in troubleshooting systems issues analyzing logs or automating basic tasks using command line tools (non-internship experience)
- 2 years of any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
- 2 years of scripting programming or security code review in a common language such as Python Java or C experience
- Knowledge of command line tools to troubleshoot protocols analyze log outputs or automate basic tasks
- Knowledge of networking protocols such as HTTP(S) DNS and TCP/IP
- Knowledge of networking protocols to include HTTP(S) DNS and TCP/IP
- Experience with AWS products and services
- Experience with programming languages such as Python Java C
- Experience in scripting programming or security code reviewing in a common language such as Python Java or C
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC) such as security design review threat modeling secure code review and security testing
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.
The AWS Security Hub team is looking for a highly motivated Security Engineer to join our this role you will research emerging threats to develop new criticality and posture management ideas and build high-confidence markers and rules that correlate criticality across a diverse set of conditions from large-scale data sources. You will work closely with engineering and product teams to shape the analysis context and inference that drive visibility into the most critical threats and vulnerabilities for AWS customers operating on AWS and other cloud providers. You will also develop innovative methods utilizing the latest techniques to analyze detections at scale. Your expertise will help defend the data of Amazons millions of customers against the most critical threats.
Key job responsibilities
Basic qualifications
- Experience evaluating threats and vulnerabilities assigning criticality based on impact and developing response automation
- Experience scripting with Python Perl Bash or PowerShell
- Experience with software development for the cloud using java and AWS Developer Tools
- Knowledge of web protocols common attacks and Linux/Unix tools and architecture
- Knowledge of cloud computing concepts and design considerations for AWS Azure and GCP
- 2 years of non academic experience in any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
Preferred qualifications
- Experience with Machine Learning and Large Language Model fundamentals including architecture training/inference lifecycles and optimization of model execution or experience leading and influencing your team or organization
- Experience using AI to automate security assessment work flows implement LLMs and perform agentic threat detection and remediation
- Experience with AI-driven development and verification
A day in the life
Most days youll be heads-down building and tuning evaluations digging into resource analysis and log data to figure out what data markers looks like and how to reliably assess impact. Youll spend time reading up on the latest threats and turning that research into something actionable. Youll also work on advancing how we assess threats whether thats prototyping new approaches using machine learning or generative AI improving enrichment pipelines or finding ways to scale what we do. Its a mix of deep technical work and close collaboration with security teams across the organization.
About the team
At AWS Security Hub security is central to maintaining customer trust and protecting customer cloud environments. Our organization is responsible for creating and maintaining a high bar for security analysis across all of Amazons products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of customer environments.
- 3 years of programming in Python Ruby Go Swift C or similar object oriented language experience
- 2 years of scripting programming and security code review in a common programming language (non-internship) experience
- 2 years of troubleshooting systems issues analyzing logs or automating basic tasks using command line tools (non-internship) experience
- Bachelors degree in computer science or equivalent
- Bachelors degree in a STEM field (Science Technology Engineering Mathematics) or experience in IT Security
- Bachelors degree in a STEM field (Science Technology Engineering Mathematics) or 2 years of IT Security experience
- Knowledge of networking protocols such as HTTP DNS and TCP/IP
- Knowledge of industry-based security vulnerabilities and remediation techniques
- Experience in scripting programming and security code reviewing in a common programming language (non-internship)
- Experience in troubleshooting systems issues analyzing logs or automating basic tasks using command line tools (non-internship experience)
- 2 years of any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
- 2 years of scripting programming or security code review in a common language such as Python Java or C experience
- Knowledge of command line tools to troubleshoot protocols analyze log outputs or automate basic tasks
- Knowledge of networking protocols such as HTTP(S) DNS and TCP/IP
- Knowledge of networking protocols to include HTTP(S) DNS and TCP/IP
- Experience with AWS products and services
- Experience with programming languages such as Python Java C
- Experience in scripting programming or security code reviewing in a common language such as Python Java or C
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC) such as security design review threat modeling secure code review and security testing
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at MA Boston - 159300.00 - 202400.00 USD annually
USA WA Seattle - 159300.00 - 202400.00 USD annually
Required Experience:
IC
About Company
Free shipping on millions of items. Get the best of Shopping and Entertainment with Prime. Enjoy low prices and great deals on the largest selection of everyday essentials and other products, including fashion, home, beauty, electronics, Alexa Devices, sporting goods, toys, automotive ... View more
