Amazon Senior Security Engineer Enterprise Protection Program 

United States, Kansas 

253955550

You will also develop proactive novel "think big" projects, leveraging your proficiency with technical tools to create solutions which aid in the detection, mitigation, and prevention of insider threat activity.You will work with team members and partners within our legal, engineering, analytics, and prevention teams to drive those projects. You will be effective both working independently and cooperatively across partner teams and able to contribute and deliver results.In this senior role, you will drive security process improvements and develop tools to protect Amazon from internal security threats, while mentoring junior team members.This position involves on-call responsibilities, typically for one week every two months.Key job responsibilities
Lead deep dive analysis of internal and external datasets to identify trends, anomalies, and activities indicative of insider threats.Collaborate with legal, engineering, analytics, and prevention teams to build and develop solutions and tools that identify and mitigate risk. Translate use cases into technical requirements.Create quantitative feedback mechanisms to drive automation and optimization of analytics and tools.Coach junior analyst/investigators to improve their skills and effectiveness.A day in the life
You will work on high impact cases and projects that seek to reduce the insider threat risk to Amazon. You will meet frequently with internal security customers, partners, and engineering teams. You will collaborate with numerous Amazon and AWS service teams. You will lead the development of tools and processes which seek to simplify and scale insider threat best practices.This is a senior role where you focus not only on how to achieve effective insider threat risk reductions, but also help define the processes and tools which are needed through a deep understanding of the overall landscape and challenges.

- 5+ years of experience using internal and external datasets to analyze and identify trends, anomalies, and activities indicative of advanced threats.
- 5+ years of experience conducting insider threat, Cyber, incident response, or equivalent investigations.
- Demonstrated proficiency with creating and using scripting tools such as SQL, Splunk, and Python.
- BS degree in Computer Science, Information Systems (IS), Computer Engineering, or 5+ years equivalent technology experience in lieu of a technical degree.