Amazon GuardDuty is a threat detection service that continuously monitors, analyzes, and processes AWS data sources and logs to identify unexpected, potentially unauthorized, and malicious activity within customer AWS environments. GuardDuty combines machine learning, anomaly detection, and malicious file discovery, using both AWS and third-party sources to help protect workloads and data across AWS accounts.
We are looking for a Software Development Engineer II to join the GuardDuty team. In this role, you will design, build, and operate highly available, scalable distributed systems that power GuardDuty's billing and usage platform, metadata services, and runtime agent provisioning. You will work on challenging problems at the intersection of cloud security, distributed systems, and customer experience — building platforms that serve both internal teams and millions of external AWS customers.
You will be a hands-on engineer contributing to the full software development lifecycle — from requirements gathering and system design through implementation, testing, deployment, and operations. You will collaborate closely with security engineers, applied scientists, and product managers to deliver features that protect millions of AWS customers. This is a high-impact role where your work directly contributes to the security posture of AWS customers worldwide.
Key job responsibilities
- Design, develop, and maintain highly available, scalable distributed systems for GuardDuty's billing and usage platform
- Build and operate metadata services that enrich data for internal GuardDuty teams
- Own and evolve the runtime agent provisioning and agent coverage platform across AWS compute services
- Own features end-to-end across the full software development lifecycle — from design through deployment and operations
- Write high-quality, testable code and participate in design and code reviews
- Troubleshoot and resolve complex production issues, driving root cause analysis and operational excellence
- Collaborate with security engineers, applied scientists, and product managers to define technical solutions
- Mentor junior engineers and contribute to team-wide engineering best practices
- Contribute to operational excellence through on-call rotations, runbook development, and system monitoring
A day in the life
As an SDE II on this team, you spend your time designing, building, and operating distributed systems that run at massive scale. On any given day, you might be writing a design document for a new feature, diving deep into code, reviewing a teammate's pull request, or debugging a production issue. You collaborate with engineers across GuardDuty to understand their needs and build the right solutions. You participate in operational reviews, contribute to sprint planning, and find time to mentor teammates along the way. The work is varied, fast-paced, and high-impact — every line of code you ship helps protect AWS customers.
About the team
Our team owns three critical platforms for GuardDuty: the billing and usage platform that accurately meters and charges GuardDuty usage across millions of AWS accounts, metadata services that enrich data and provide internal GuardDuty teams with the context they need to build better detections and customer experiences, and the runtime agent provisioning and coverage platform that deploys GuardDuty's security agent across AWS compute services and tracks coverage health. We work at the intersection of security, distributed systems, and customer experience — building platforms that are foundational to how GuardDuty operates and scales.
