Special Projects & Investigations, Threat Intelligence team (SPI-TI) is seeking a motivated Threat Intelligence Specialist with a strong investigative mindset and technical background. As a Threat Intelligence Specialist on SPI-TI, you will solve the most interesting and difficult fraud challenges faced by Amazon. Your technical skills will enable the program to detect, prevent and disrupt significant fraud threats and build intelligence solutions that scale. You will build proofs of concept and develop tooling/automation solutions that help Amazon scale.
A successful candidate will have a strong programming background and a passion for threat intelligence/investigations. They are an enthusiastic learner and insatiably curious. They have a demonstrated history of driving workable solutions, even in the face of resource limitations, as well as environmental, legal, and technical challenges. We seek a team player who prioritizes well, communicates clearly, and has a consistent track record of delivering results. You must be proactive in removing roadblocks, always looking for ways to innovate and operate more efficiently and be able to handle multiple competing priorities in a fast-paced environment. You will need to influence internal and external stakeholders that are spread across the world.
Key job responsibilities
- Our partner teams have diverse responsibilities to research, investigate, and disrupt fraud. Your responsibility is to build mechanisms that enable us to collect intelligence, process it, and enable our partners to be more proactive by preventing fraud at each step of the fraud lifecycle.
- Apply your technical expertise to improve organizational awareness of cyber-crime tooling, infrastructure, and capabilities and how bad actors use them against Amazon Stores. Produce actionable threat intelligence that influences investigations, product, and external teams.
- Drive research into technical fraud problems, automate manual processes, and build tooling/automation that (1) improves team capabilities and (2) enables the program to scale.
- Identify, connect, and analyze new internal and external data sources and adapt them for programmatic use by the team. Optimize data processing and analysis pipelines to work at Amazon scale.
- Contribute to overall engineering efforts, including supporting design and development for capturing, storing, processing, analyzing and disseminating threat intelligence for awareness and action
- BS in computer science, computer security, networking, information systems, computer engineering, systems engineering (or similar field); or 5+ years’ equivalent experience.
- 5+ years’ experience in at least two of the following areas: threat intelligence, security engineering, data mining, information security, security operations/incident response, cyber-crime investigations or intelligence, fraud prevention, cyber threat hunting.
- Proficiency using programming languages: Python required. Other languages are a plus (Go, Ruby, Shell/Bash scripting, Java, Javascript/TypeScript, Rust, etc).
- Familiarity using threat intelligence, data analysis or technical analysis tools and platforms
- 3-5+ years’ experience using SQL or other query languages.
- Ability to conduct technical research across several layers of the tech stack and automating tools
- Industry certifications or MS in computer science, computer security, networking, information systems, computer engineering, systems engineering (or similar field).
- Current knowledge of cyber threat actors and their TTPs.
- Experience helping organizations understand cyber/fraud risks through red-team exercises and/or penetration testing.
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $91,800/year in our lowest geographic market up to $196,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.