SDE - Threat Intel Systems, ACTI Engineering

Job :  |  Services LLC

The Amazon Cyber Threat Intelligence (ACTI) organization is responsible for investigating, analyzing, and defending against sophisticated cyber threats targeting Amazon's global businesses and customers. ACTI combines technical expertise, strategic analysis, and advanced tooling to identify emerging threats, track adversary activities, and provide actionable intelligence across Amazon's security ecosystem.

As a Software Development Engineer within ACTI Engineering, you will architect and build the development of mission‑critical distributed systems that power Amazon's threat intelligence capabilities. You will make key technical decisions that shape our platform's architecture, designing scalable solutions that process, analyze, and correlate vast amounts of security data across Amazon's global infrastructure. Your technical leadership will directly influence ACTI's ability to detect, analyze, and respond to emerging security threats at scale.

• Own and architect critical components of ACTI's threat intelligence platforms, making key technical decisions that impact system scalability, performance, and reliability.
• Design and implement distributed systems that process petabytes of security data.
• Lead the development of service‑oriented architectures that integrate complex threat intelligence workflows.
• Drive technical decisions around data modeling, storage solutions, and processing frameworks.
• Own the full software development lifecycle, from design through deployment and operational excellence.
• Mentor junior engineers on system design, coding practices, and architectural patterns.
• Partner with threat intelligence analysts to translate complex requirements into scalable technical solutions.
• Build some of the largest‑scale intelligence tooling on earth to defend against evolving security threats.
• Respond to production incidents and participate in an on‑call rotation.

• Design and implement services that ingest, normalize, and correlate investigative data from across Amazon.
• Develop and optimize APIs that provide intelligence data to internal customer teams, enabling them to build detections, agents, and dashboards on top of the platform.
• Partner with analysts to translate investigative workflows into scalable, automated pipelines.
• Lead technical design reviews, write design documents, and mentor SDEs on the team.
• Operate what you build—respond to operational events, drive root cause analysis, and improve system reliability.
• Evaluate build‑vs‑buy decisions for intelligence tooling and present recommendations to leadership.

You work at the intersection of security, data engineering, and product development. The problems change frequently because the threat landscape does, and you will have significant influence over architecture decisions and the technical direction of the platform.

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services.

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge‑sharing, training, and other career‑advancing resources here to help you develop into a better‑rounded professional.

We value work‑life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our…