> Markdown version of [/jobs/ext/2026475-security-intelligence-engineer-incident-response-threat-intelligence-acti](https://www.wearedevelopers.com/jobs/ext/2026475-security-intelligence-engineer-incident-response-threat-intelligence-acti). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Intelligence Engineer, Incident Response Threat Intelligence, ACTI

- **Company:** Amazon.com, Inc.
- **Location:** Herndon, VA, United States
- **Experience:** Experienced
- **Contract:** Internship / Graduate position
- **Skills:** Java (Programming Language), .NET Framework, C++ (Programming Language), Command-Line Interface, Code Review, Cyber Security, Computer Programming, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Python (Programming Language), Log Analysis, Network Protocols, Ruby, Security Information and Event Management, TCP/IP, Unstructured Data, Scripting, Swift (Programming Language), Cyber Threat Analysis, Golang
- **Published:** August 11, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/security-intelligence-engineer-incident-response-threat-intelligence-acti-herndon-va-usa-58899043

## About the Role

programming in Python, Ruby, Go, Swift, Java, .Net, C++ or related OO language * 2+ years scripting, programming, and security code review (non-internship) * 2+ years troubleshooting systems issues, log analysis, or automating tasks via command line * Bachelor's degree in a STEM field or 3+ years IT Security experience * Knowledge of networking protocols HTTP, DNS, TCP/IP * Experience with scripting, programming, and security code review (non-internship) Key requirements * work-life balance * career growth and mentorship * health insurance * 401(k) matching * RSUs * paid time off

## Description

Experteer Overview In this role, you analyze indicators to produce actionable intelligence that informs incident response and threat mitigation. You will develop new analytics techniques and partner with cross-functional teams to bolster security capabilities. You contribute to the evolving understanding of threat actors, TTPs, and indicators across networks and hosts, while producing finished threat intelligence products. You join a mission-driven team focused on proactive defense and threat landscape awareness, with on-call responsibilities. Compensation / Benefits * Analyze large and unstructured data sets to spot trends and anomalies related to malicious activity * Develop security techniques and automation for scalable, rapid operations * Enhance Amazon's understanding of current threat landscape and attacker TTPs * Conduct deep-dive analyses of malicious artifacts * Draft and publish finished threat intelligence products * Attend to periodic on-call duties Tasks * 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or related OO language * 2+ years scripting, programming, and security code review (non-internship) * 2+ years troubleshooting systems issues, log analysis, or automating tasks via command line * Bachelor's degree in a STEM field or 3+ years IT Security experience * Knowledge of networking protocols HTTP, DNS, TCP/IP * Experience with scripting, programming, and security code review (non-internship) Key requirements * work-life balance * career growth and mentorship * health insurance * 401(k) matching * RSUs * paid time off


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall)
- [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson)
- [Stranger Danger: Your Java Attack Surface Just Got Bigger](https://www.wearedevelopers.com/videos/346-stranger-danger-your-java-attack-surface-just-got-bigger)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)