Description

　　Amazon's Selling Partner Risk (SPR) team within Selling Partner Services (SPS) business designs and implements policies, tools and technology innovations to protect customers by identifying and preventing abuse worldwide. Our growth requires highly skilled candidates who move fast, have an entrepreneurial spirit to create new solutions, a tenacity to get things done, thrive in an environment of ambiguity and change, and are capable of breaking down and solving complex problems. We value individual expression, respect different opinions, and work together to create a culture where each of us is able to contribute fully.

　　Our unique backgrounds and perspectives strengthen our ability to achieve Amazon's mission of being Earth's most customer-centric company.

　　Our Threat Intelligence team is looking for an experienced Intelligence Analyst with demonstrated subject matter expertise in cyber fraud threats either in the private or public sector.

　　Ideal candidates have served in a capacity within the Intelligence Community performing a wide variety of support functions to include detecting, identifying, assessing, exploiting, countering, and/or neutralizing the intelligence collection efforts of external fraud threats against Amazon, its employees, and our Customers..

　　This position will be based in Singapore to support Amazon Selling Partner Services (SPS). You will be on a team responsible for identifying and analyzing fraud activity, discovering tactics, techniques, and procedures employed by the fraud actors, and providing intelligence support to investigations. You will identify areas for process improvement and work with other cross-functional teams to automate and streamline new and existing workflows. This position will provide you with a challenging opportunity.

　　To be successful, the candidate must possess a customer-oriented attitude; have the highest standards of professionalism; and thrive in a work environment where everyone's views are respected and valued.

　　Key job responsibilities

　　Collect, analyze, and author threat intelligence reports covering emerging threats and vulnerabilities

　　Analyze and research fraud threat activity to provide actionable threat intelligence, including adversary indicators of compromise, technique, tactics and procedures, behaviors, exploited vulnerabilities, and trends.

　　Collaborate on developing, implementing, and maintaining our threat intelligence platform and related tooling

　　Identify and hunt for related TTPs across all internal/external repositories.

　　Provide situational awareness on the current threat landscape and the TTPs associated with specific threats to our business

　　Demonstrate practical knowledge managing threat data and creating intelligence assessments in support of our incident response & threat hunting missions

　　Collect data from intelligence communities, threat intelligence platforms, open source data repositories, and other sources to analyze TTPs and anomalies

　　Conduct detailed technical analysis supported by industry accepted threat intelligence analytical frameworks, tools, and standards

　　Provide timely, relevant, and proactive analysis across Amazon and subsidiaries

　　Actively strengthen intelligence gathering, and investigation SOPs.

　　About the team

　　Threat Intelligence (TI) protects Amazon and its subsidiaries by proactively analyzing new security threats, identifying malicious actors, and researching the evolving threat landscape. We partner with teams throughout Amazon to facilitate information sharing and increase security resilience through cross-functional collaboration. We share actionable threat information and focus on continually developing collaboration and partnerships with security & intelligence teams throughout Amazon and the security industry. TI drives and enhances our ability to emulate threat actors, respond to incidents, and to stay one step ahead of our adversaries.

　　We are open to hiring candidates to work out of one of the following locations:

　　Singapore, SGP

　　Basic Qualifications

　　Bachelor’s degree in Computer Science, Information Assurance, Cybersecurity, Electrical and Computer Engineering, Intelligence, Security Management or related security industry degree (add intelligence/security management or related security industry degree)

　　2+ years working within the Intelligence Community supporting/performing incident response, threat hunting, threat intelligence, forensics, or similarly related experience.

　　Strong ability to articulate Tactical, Operational, and Strategic threat intelligence to internal stakeholders through detailed intelligence reports.

　　Experience with SQL or other query languages, e.g., SQL, SparkQL, GraphQL

　　Knowledge of common fraud tactics, the intelligence cycle, and analysis methodologies.

　　Ability to demonstrate analytical expertise, attention to detail, critical thinking, logic, and to learn rapidly.

　　Experience obtaining, processing, and analyzing various sources of information including open sources, deep web, and dark web.

　　Familiarity with various types of digital investigation, data management, and scripting utilities.

　　Self-motivated with the ability to lead and influence across multiple stakeholders.

　　Proficient in Chinese Mandarin

　　Preferred Qualifications

　　3+ years of experience conducting threat intelligence research and analysis

　　3+ years global analysis and threat mitigation background

　　Experience working with Threat Intelligence subscriptions and threat feeds.

　　Experience in conducting investigations into advanced persistent threats.

　　Certifications (any security certification similar to, but not exclusive to the following): Security +, OSCP, GREM, GCTI, GXPN, GCIH or CISSP.