Security Engineer, Correlation and Response, AWS Security Hub

About the role

The AWS Security Hub team is looking for a highly motivated Security Engineer to join our team. In this role, you will research emerging threats to develop new criticality and posture management ideas and build high-confidence markers and rules that correlate criticality across a diverse set of conditions from large-scale data sources. You will work closely with engineering and product teams to shape the analysis, context and inference that drive visibility into the most critical threats and vulnerabilities for AWS customers operating on AWS and other cloud providers.

Responsibilities

• Evaluate threats and vulnerabilities, assign criticality based on impact, and develop response automation
• Script with Python, Perl, Bash or PowerShell
• Develop innovative methods utilizing the latest techniques to analyze detections at scale
• Defend the data of Amazon's millions of customers against the most critical threats

Requirements

• Experience evaluating threats and vulnerabilities, assigning criticality based on impact, and developing response automation
• Experience scripting with Python, Perl, Bash or PowerShell
• Experience with software development for the cloud using Java and AWS Developer Tools
• Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture
• Knowledge of cloud computing concepts and design considerations for AWS, Azure and GCP

Qualifications

• 2+ years of non academic experience in any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• 2+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship)
• Bachelor's degree in computer science or equivalent
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience in scripting, programming, and security code reviewing in a common language, such as Python, Java or C++
• Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)

Preferred Qualifications

• Experience with Machine Learning and Large Language Model fundamentals, including architecture, training/inference lifecycles, and optimization of model execution, or experience leading and influencing your team or organization
• Experience using AI to automate security assessment work flows, implement LLMs and perform agentic threat detection and remediation
• Experience with AI-driven development and verification