> Markdown version of [/jobs/ext/1306391-aws-security-engineer](https://www.wearedevelopers.com/jobs/ext/1306391-aws-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Aws Security Engineer

- **Company:** Stripe
- **Location:** Spain
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Amazon Web Services, Apple Mac Systems, Microsoft Azure, Big Data, Cloud Computing, Cyber Security, Computer Programming, Cursor (Graphical User Interface Elements), Query Languages, Linux, Programming Tools, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Open Source Technology, Red Team (Cyber Security), Kusto Query Language, Reverse Engineering, Security Information and Event Management, SQL Databases, GitHub Copilot, Large Language Models, Mitre Att&ck, Malware, Cyber Threat Analysis, Pyspark, Cybercrime, Microsoft Sentinel, Purple Team (Cyber Security), Splunk, Data Pipelines, Databricks
- **Published:** July 17, 2026
- **Apply:** https://es.trabajo.org/oferta-5354-8eaf742eb918937f98e908a17700fd7f

## About the Role

SQL) and programming (Python or similar) ~ Background in malware analysis, reverse engineering, or threat research Experience with purple team operations - collaborating with offensive security to validate detections Familiarity with big data platforms (Databricks, Trino, PySpark) for large-scale log analysis Proficiency with AI/LLM-assisted development tools (Claude Code, Cursor, GitHub Copilot) applied to detection workflows Experience with detection validation tools (Atomic Red Team, ATT&CK Evaluations) Contributions to open-source detection content, research, or conference presentations Relevant certifications such as HTB CDSA, GCIH, GCFA, GNFA, OSCP, TCM PMAT, or GREM Linux, SIEM, Malware Analysis, Reverse Engineering, MITRE ATT&CK

## Description

endpoint-based detections (event logs, EDR telemetry, memory/file artifacts) across Windows, Linux, and macOS Collaborate with IR, SOC, and offensive security teams to validate and refine detections based on real-world incidents and red team exercises Build data pipelines, automation, and tooling that enable detection-as-code practices and scalable deployment Lead projects, mentor teammates, and champion quality standards within the team 5+ years of experience in detection engineering, threat hunting, or security operations ~ Demonstrated experience writing detection logic in modern SIEM platforms (e.g., Splunk, Chronicle, Elastic, CrowdStrike NG-SIEM, Panther, Microsoft Sentinel) ~ Experience developing network-based and endpoint-based detections across multiple OS platforms (Windows, Linux, macOS) ~ Experience analyzing telemetry across endpoint, network, cloud (AWS/GCP/Azure), identity, and application log sources ~ Proficiency in detection/query languages (SPL, KQL, EQL, YARA-L


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Empowering Retail Through Applied Machine Learning](https://www.wearedevelopers.com/videos/976-empowering-retail-through-applied-machine-learning)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss)
- [Dev Digest 119 - ❤️ === ❤️](https://www.wearedevelopers.com/magazine/454-dev-digest-119)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)