Security Engineer, Enterprise Protection Program - Account Misuse Team

Security Engineer, Enterprise Protection Program - Account Misuse Team

Job :  |  Services LLC

The Enterprise Protection Program – Account Misuse Team (EPP‑AM) seeks a Security Engineer to lead the identification, investigation, and mitigation of insider threats to Amazon through advanced data analysis and threat hunting techniques.

• Threat Investigation & Analysis
  • Lead daily investigations into active insider threats using data from internal and external sources.
  • Build sophisticated queries and process large datasets to identify and pursue potential insider threat activity.
  • Apply deep analytical skills to uncover complex security patterns and anomalies.
• Innovation & Tool Development
  • Develop proactive, innovative projects that leverage technical expertise to create solutions.
  • Design and implement tools for detection, mitigation, and prevention of insider threat activity.
  • Drive security process improvements to strengthen Amazon’s internal threat protection capabilities.
• Cross‑Functional Collaboration
  • Partner effectively with HR, legal, engineering, analytics, and prevention teams to execute security initiatives.
  • Deliver results both independently and through collaboration across multiple partner teams.
  • Contribute to team knowledge sharing.
• Leadership & Impact
  • Take ownership of complex security challenges.
  • Contribute to strategic security planning and process optimization.
  • Participate in on‑call responsibilities (typically one week every two months).

You will tackle complex insider‑threat cases, spearhead strategic projects that reduce risk across Amazon’s global operations, collaborate with internal security stakeholders and engineering teams, and innovate detection tools to streamline insider‑threat detection and response.

• Bachelor’s degree in computer science or equivalent.
• 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non‑internship).
• 3+ years of scripting, programming, and security code review in a common programming language (non‑internship).
• Experience working with global teams and diverse partners.
• 4+ years of fraud investigation, abuse, cyber‑crimes, or equivalent experience.

• Experience with AWS products and services.
• 2+ years of any combination of threat modeling, secure coding, identity management, software development, cryptography, system administration, and network security experience.
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks.
• Experience running SQL queries and data mining.

• Base salary range:  –  USD annually (Herndon, VA; Seattle, WA).
• Amazon package includes sign‑on payments and restricted stock units (RSUs).
• Health insurance (medical, dental, vision, prescription), Basic Life & AD&D insurance, and optional supplemental life plans.
• Employee assistance program, mental health support, medical advice line.
• Flexible spending accounts, adoption and surrogacy reimbursement coverage.
• 401(k) matching, paid time off, and parental leave.
• Comprehensive benefits information at (Use the "Apply for this Job" box below)..

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.