Threat Intelligence Analyst, Spi Threat Intelligence

Bachelor’s degree in Computer Science, Information Assurance, Cybersecurity, Electrical and Computer Engineering, Intelligence, Security Management or related security industry degree (add intelligence/security management or related security industry degree)
- 2+ years working within the Intelligence Community supporting/performing incident response, threat hunting, threat intelligence, forensics, or similarly related experience.
- Strong ability to articulate Tactical, Operational, and Strategic threat intelligence to internal stakeholders through detailed intelligence reports.
- Experience with SQL or other query languages, e.g., SQL, SparkQL, GraphQL
- Knowledge of common fraud tactics, the intelligence cycle, and analysis methodologies.
- Ability to demonstrate analytical expertise, attention to detail, critical thinking, logic, and to learn rapidly.
- Experience obtaining, processing, and analyzing various sources of information including open sources, deep web, and dark web.
- Familiarity with various types of digital investigation, data management, and scripting utilities.
- Self-motivated with the ability to lead and influence across multiple stakeholders.
- Proficient in Chinese Mandarin

Our unique backgrounds and perspectives strengthen our ability to achieve Amazon's mission of being Earth's most customer-centric company.

This position will be based in Singapore to support Amazon Selling Partner Services (SPS). You will be on a team responsible for identifying and analyzing fraud activity, discovering tactics, techniques, and procedures employed by the fraud actors, and providing intelligence support to investigations. You will identify areas for process improvement and work with other cross-functional teams to automate and streamline new and existing workflows. This position will provide you with a challenging opportunity.

Key job responsibilities
- Collect, analyze, and author threat intelligence reports covering emerging threats and vulnerabilities
- Analyze and research fraud threat activity to provide actionable threat intelligence, including adversary indicators of compromise, technique, tactics and procedures, behaviors, exploited vulnerabilities, and trends.
- Collaborate on developing, implementing, and maintaining our threat intelligence platform and related tooling
- Identify and hunt for related TTPs across all internal/external repositories.
- Provide situational awareness on the current threat landscape and the TTPs associated with specific threats to our business
- Demonstrate practical knowledge managing threat data and creating intelligence assessments in support of our incident response & threat hunting missions
- Collect data from intelligence communities, threat intelligence platforms, open source data repositories, and other sources to analyze TTPs and anomalies
- Conduct detailed technical analysis supported by industry accepted threat intelligence analytical frameworks, tools, and standards
- Provide timely, relevant, and proactive analysis across Amazon and subsidiaries
- Actively strengthen intelligence gathering, and investigation SOPs.

About the team
Threat Intelligence (TI) protects Amazon and its subsidiaries by proactively analyzing new security threats, identifying malicious actors, and researching the evolving threat landscape. We partner with teams throughout Amazon to facilitate information sharing and increase security resilience through cross-functional collaboration. We share actionable threat information and focus on continually developing collaboration and partnerships with security & intelligence teams throughout Amazon and the security industry. TI drives and enhances our ability to emulate threat actors, respond to incidents, and to stay one step ahead of our adversaries.

Singapore, SGP
- 3+ years of experience conducting threat intelligence research and analysis
- 3+ years global analysis and threat mitigation background
- Experience working with Threat Intelligence subscriptions and threat feeds.
- Experience in conducting investigations into advanced persistent threats.
- Certifications (any security certification similar to, but not exclusive to the following): Security +, OSCP, GREM, GCTI, GXPN, GCIH or CISSP.