Cyber Threat Intelligence Analyst

Job description

説明

The Amazon Web Services Threat Intel Group is responsible for developing actionable intelligence on advanced cyber threats to our services and our customers. We collect indicators and intelligence from a variety of internal and external sources and use that information to develop an understanding of high grade actors and their tools, techniques, and procedures. We then leverage that understanding to proactively identify and mitigate malicious activity.

The successful candidate will be required to analyze telemetry data to identify signals indicative of high grade adversaries. He or she will help enhance our capabilities by formulating new analytic techniques and working across teams to drive the supporting capabilities. A deep understanding of current APT actors and TTPs as well as experience performing question driven analysis is required. Candidates should have a solid understanding of network and host based indicators and how to best leverage them. He or she should be able to script and help automate recurring tasks to improve the overall effectiveness of the team. An understanding of operating systems internals will be an asset.
Key responsibilities include:
· Perform deep dive analysis of potentially malicious artifacts.
· Analyze large structured and unstructured data sets to identify trends and anomalies indicative of malicious activities.
· Create security techniques and automation for internal use that enable the team to operate at high speed and broad scale.
· Pursue actionable intelligence on current threats as they relate to AWS.
· Periodic on-call responsibilities.
· Translate actor TTPs into actionable data points to be prosecuted on internal data sets