Software Dev Engineer, GuardDuty

Amazon GuardDuty is a customer-facing threat detection service that is built to protect applications and services running on AWS. The service applies advanced data analytics to high-volume service logs and employs techniques such as machine learning, anomaly detection, and threat intelligence to identify and respond to potential risks at scale. https://aws.amazon.com/guardduty/

The Amazon GuardDuty team is looking for a a highly skilled and innovative senior software engineer to help build the future of the service. You will work closely with applied scientists with Math PhDs, and security researchers to build advanced analytics and machine learning systems at AWS scale. You will have the opportunities to work in the emerging domain of AI Threat Detection, which extends GuardDuty to address the unique and emerging threats targeting AI models and generative AI applications. These include risks such as data poisoning, prompt injection, model exfiltration, and misuse of large language models. By developing detection systems for these evolving attack surfaces, you will help AWS customers adopt AI securely and with confidence. Our mission is to develop massively scalable, globally distributed detection systems that protect AWS customers from evolving threats and strengthen their security and compliance posture.

Key job responsibilities

• Design, build, and operate large-scale, distributed security detection systems.
• Extend GuardDuty's capabilities into the AI Threat Detection domain by developing detections for emerging threats targeting AI models and generative AI applications.
• Collaborate with applied scientists and security researchers to transform research outcomes-such as anomaly detection methods and large language model (LLM)-based approaches-into scalable, production-ready systems.
• Drive the full software development lifecycle, including scoping, planning, design, implementation, testing, documentation, deployment, and operational support.
• Conduct design and code reviews, providing feedback on architecture, scalability, performance, and integration.
• Operate in a highly available, customer-facing environment with on-call responsibilities (typically one week every two months), and contribute to building resilient systems that minimize operational load.
• Participate in root cause analysis and long-term improvements to ensure operational excellence and reduce recurring issues.

About the team

Our team is dedicated to supporting new team members. Our team has a broad mix of experience levels and Amazon tenures, and we're building an environment that celebrates knowledge sharing and mentorship. Our principal engineers and senior engineers truly enjoy mentoring more junior engineers and engineers from non-traditional backgrounds through one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth. We try to assign projects and tasks based on what will help each team member develop into a better-rounded engineer and enable them to take on more complex tasks in the future.