Company Overview
About the job
Description
The Amazon Security Threat Intelligence (ACTI) organization is responsible for investigating and understanding threat actors that are targeting Amazon’s businesses. As a Software Engineer you will be a member of the ACTI Engineering Team. Responsibilities will include supporting the operation of our threat intelligence program, through automation and by building modern pipelines for large security data sets.
This role will work to understand how ACTI conducts Threat Intelligence investigations, the underlying Amazon internal and external data sets, and malicious artifact storage and analysis in order to develop and automate more efficient and resilient solutions.
In this role, you will be supporting engineering platforms that include open-source, vendor licensed and native AWS components. These platforms support security missions across Amazon and its customers to better understand threats facing the company. Additionally, working with internal intelligence analysts and external customers to better understand their daily workflows and needs will be required. You’ll be a critical part of an organization focused on building and influencing the security culture within Amazon, with the ultimate goal of ensuring the continued safety and security of our customers.
Key job responsibilities
- Using Python to automate tasks and manipulate data
- Using SQL, EMR and data manipulation libraries such as Spark or Pandas
- Understanding concepts related to scaling out processing via the use of instrumentation capabilities such as Step Functions, Airflow or other NAWS services
- Creating data pipelines
- Collaborate on developing, implementing, and maintaining our threat intelligence platform and malware, malware analysis, and malware handling systems
- Collect data from intelligence communities, threat intelligence platforms, open source data repositories, and other sources
- Write automation to aid threat intel platform and data pipelines
- Demonstrate practical knowledge of managing threat data in support of our missions
- Utilize Vertex Synapse and storm query language
APPLY