Senior Security Engineer, Payments Security Threat Hunting & Detections

Interested in leading our charge to proactively disrupt large-scale threats against Amazon’s Payments business responsible for processing millions of transactions a day globally?

Our goal is to defend the Amazon Payments businesses by proactively seeking, exposing, and disrupting large-scale threats in a repeatable fashion using an intelligence informed and hypothesis driven approach. As a Senior Security Engineer on the Payments Security Intelligence Threat Hunting and Detections team you will lead our approach to develop innovative methods researching industry relevant threat actors and their tactics, techniques, and procedures (TTPs) to hunt for their presence across the Payments stack, codifying learnings via detections-as-code, and generating intelligence to be disseminated across the broader Amazon Security community disrupting adversary operations at scale while providing investigative support via on call rotation in the event of confirmed compromises.


Key job responsibilities

• Work ceaselessly to explore and broaden knowledge of the Payments threat landscape by disseminating and applying learnings across the Payments Security organization
• Think outside the box to proactively expose and disrupt our most critical threats impacting the security needle
• Thought partner, owner, and designer in evolving our Threat Hunting & Detections vision within the Payments Security Intelligence Life Cycle and how we interface across the Amazon-wide Security organization
• Hunt our most critical adversaries analyzing data at exabyte scale
• Key player representing Payments Security across cross-org multi-discipline meet ups influencing the security bar across Amazon
• Influence the design, architecture, and direction of our hunting and detection technology stack
• Ship high confidence detections-as-code to ensnare adversaries alerting to their presence

Basic Qualifications

• Bachelors Degree in Computer Science, or equivalent work experience (we care less about your degree, and more about your experience and how you think about eradicating threats)
• 5+ years of experience working in or partnering across multiple of the following: security engineering or operations team, or experience replicating, investigating, detecting, or responding to threats
• Advanced knowledge of cloud, network, system, and/or web application attacks and mitigations
• Deep knowledge of at least 1 scripting language (e.g., Python, SQL, Go, Rust, etc), preferably building your own tooling in pursuit of achieving security goals
• Proficiency understanding adversary techniques and the signals they generate mapped across security frameworks such as MITRE ATT&CK

Preferred Qualifications

• Excellent communication and data presentation skills that allow you to clearly, compellingly, and effectively influence audiences across organizational boundaries including both technical and executive audiences
• Experience working with data pipelines (or data engineering teams) automating event-driven security workflows interfacing with large security data lake technologies (e.g., Apache Hive SQL, PySpark, Hadoop, Apache Flink, Jupyter Notebooks)
• Deep experience working with cloud computing (preferably AWS) to secure (or break into) an organization against advanced threats automating the hunt, detect, and respond processes

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.


Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. Applicants should apply via our internal or external career site.