Cyber Threat Intelligence Analyst - eCrime
Herndon, Virginia, USA
Amazon.com
Free shipping on millions of items. Get the best of Shopping and Entertainment with Prime. Enjoy low prices and great deals on the largest selection of everyday essentials and other products, including fashion, home, beauty, electronics, Alexa...You will analyze telemetry data to identify signals indicative of large scale fraud and abuse. You will help enhance our capabilities by formulating new analytic techniques and working across teams to drive the supporting capabilities. We seek candidates with a deep understanding of current cybercrime and fraud actors and TTPs and experience performing question-driven analysis. You have a solid understanding of network and host based indicators and how to best leverage them. You are able to script and help automate recurring tasks to improve the overall effectiveness of the team. An understanding of operating systems internals will be an asset.
Key responsibilities include:
· Perform deep dive analysis of potentially malicious artifacts.
· Pursue actionable intelligence on cybercrime threats as they relate to AWS.
· Translate actor TTPs into actionable data points to reduce overall fraud and abuse activity in AWS
· Analyze large structured and unstructured data sets to identify trends and anomalies indicative of malicious activities.
· Create security techniques and automation for internal use that enable the team to operate at high speed and broad scale.
· Periodic on-call responsibilities.
Inclusive Team Culture
Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.
Work/Life Balance
Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well balanced life—both in and outside of work.
Mentorship & Career Growth
Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded engineer and enable them to take on more complex tasks in the future.
Basic Qualifications
· BS degree in Computer Science, MIS, Computer Engineering, or 5+ years equivalent technology experience.
· 2 years experience with tracking cybercrime and fraud groups and other high grade threats.
· 2 years experience in system, network, and/or application security.
· 2 years experience building automated tools in C, C++, Python, PowerShell, or Bash
· 2 years experience in either incident response or active tracking of cyber criminal activity
· 1 year experience with SQL or other query languages
Preferred Qualifications
· MS degree in Computer Science, MIS, Computer Engineering· 5+ years of experience in cybercrime and fraud research and analysis.
· Strong understanding of Windows, Linux, and or OS X internals
· Experience with malware analysis, network flow analysis and large scale data analysis.
· Experience with AWS services.
· Excellent written and oral communication skills.
· Meets/exceeds Amazon’s leadership principles requirements for this role
· Meets/exceeds Amazon’s functional/technical depth and complexity for this role
Amazon is committed to a diverse and inclusive workforce. Amazon is an equal opportunity employer and does not discriminate on the basis of race, ethnicity, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
Tags: Application security Automation AWS Bash C Computer Science Cyber crime Incident response Linux Malware PowerShell Python SQL Threat intelligence TTPs Windows
Perks/benefits: Career development Conferences Flex hours Team events
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Cyber Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Staff Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Product Security Engineer jobs
- Open Manager Pentest H/F jobs
- Open Senior Information Security Analyst jobs
- Open Cyber Security Specialist jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Senior Information Security Engineer jobs
- Open Security Specialist jobs
- Open Senior Penetration Tester jobs
- Open Security Researcher jobs
- Open Cybersecurity Specialist jobs
- Open Senior Security Architect jobs
- Open Sr. Security Engineer jobs
- Open IT Security Engineer jobs
- Open CISM-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open ISO 27001-related jobs
- Open Pentesting-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open SaaS-related jobs
- Open CISA-related jobs
- Open Analytics-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Java-related jobs
- Open Security assessment-related jobs
- Open Malware-related jobs
- Open DevOps-related jobs
- Open Security Clearance-related jobs
- Open IDS-related jobs
- Open EDR-related jobs
- Open Forensics-related jobs
- Open CEH-related jobs
- Open Kubernetes-related jobs