Wireless Security Engineer II, Wireless Security

Amazon is seeking a Wireless Security Engineer II for their Wireless Security Assessments team. The role focuses on building cloud-based detection systems for wireless threats, analyzing large-scale security data, and conducting wireless assessments to ensure security across Amazon facilities.

Responsibilities:

• Design, build, test, and maintain cloud-based detection logic for wireless security threats using telemetry from distributed sensor systems and enterprise security tooling
• Analyze large-scale security data — RF metadata, wireless IDS alerts, syslog, and custom sensor telemetry — to identify anomalies, trends, and security issues
• Develop and refine data pipelines that ingest, normalize, and enrich wireless telemetry for continuous assessment and detection
• Own wireless security investigations from framing through outcome delivery
• Leverage and improve AI-assisted workflows — working alongside automation tooling for data collection, triage, and pattern recognition
• Conduct targeted on-site wireless assessments when physical validation is required, using wireless capture and analysis tools across relevant protocols
• Author risk-calibrated findings and drive remediation with facility owners and partner teams
• Build tools and automation that increase the team's detection coverage and operational efficiency
• Present findings, briefs, and analysis to senior leadership, internal departments, and stakeholders
• Engage with partner teams to understand security concerns and educate on wireless security topics

Requirements:

• 3+ years of security-related professional experience
• 3+ years of experience in detection engineering, security data analysis, or security operations engineering
• 1+ years of hands-on experience with wireless security tools and concepts (e.g., wireless packet capture, spectrum analysis, WIDS, or wireless protocol analysis across 802.11, Bluetooth, IoT, or cellular)
• Experience with detection engineering and/or anomaly detection within security — writing detection logic, security rules, or threat signatures for production monitoring systems
• Experience with log aggregation and analysis platforms (e.g., Splunk, OpenSearch, ELK, or equivalent) or security data lakes
• Experience directly working with cloud hosting technologies (AWS, Azure, etc.)
• Software engineering fundamentals with proficiency in Python (or similar) for tooling, automation, and data analysis
• Experience applying threat modeling or other risk identification techniques
• Experience with AWS products and services (S3, Athena, Lambda, CloudWatch, Kinesis, or equivalent)
• Experience building detection-as-code frameworks or custom detection pipelines
• Experience with LLM-assisted security workflows, agentic orchestration, or AI-augmented security operations (e.g., automated triage, enrichment pipelines, agent-based task execution)
• Experience building data pipelines for security telemetry (ingestion, normalization, enrichment, alerting)
• Experience with software-defined radios and RF signal analysis
• Experience with wireless intrusion detection systems (WIDS) or continuous monitoring platforms
• Knowledge of security telemetry across 2+ domains (e.g., hosts, networks, cloud, physical security, wireless)
• Experience with multiple wireless protocols: 802.11, Bluetooth, IoT (Zigbee, LoRa), Cellular (2G-5G), two-way radio systems
• Experience with threat intelligence, threat hunting, or attacker tradecraft frameworks (e.g., MITRE ATT&CK)
• Bachelor's degree in computer science, electrical engineering, cybersecurity, or equivalent experience