Security Engineer II Security Incident Response Team SIRT

Amazon is seeking qualified Security Engineers to join our innovative high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events conduct analysis of threats such as malware and intrusion attempts and provide security services to safeguard highly sensitive data. They work handson with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems.

SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting rootcause analysis. With your technical expertise you will be solving security challenges at scale working to protect the applications powering the most sophisticated ecommerce platform ever built. We value broad and deep technical knowledge specifically in the fields of forensics malware analysis network security application security threat hunting and threat intelligence.

Key job responsibilities
Responding to security incidents and coordinating a cohesive response involving multiple teams across Amazon.
Providing security engineering solutions and support during customerfacing incidents proactively considering the prevention of similar incidents from occurring in the future.
Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk.
Identifying and recommending solutions that improve or expand Amazons incident response capabilities.
Working alongside and mentoring Information Security engineers to improve security reduce and quickly address risk.
Evaluating the impact of current security trends advisories publications and academic research to Amazon coordinating response as necessary across affected teams.
Keeping your knowledge and skills current with the rapidly changing threat landscape.
Participating in a followthesun oncall rotation.

Bachelors degree in computer science or equivalent and 3 years of experience working as part of a computer Security Incident Response Team (CSIRT) or Product Security Incident Response Team (PSIRT)
Experience with common security monitoring log analysis and forensic tools
Experience scripting with Python Perl Bash or PowerShell
Experience triaging and developing security alerts and response automation conducting frontline analysis and providing escalation support
Knowledge of networking protocols such as HTTP DNS and TCP/IP

3 years of any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
3 years of programming in Python Ruby Go Swift Java .Net C or similar object oriented language experience
Experience with AWS products and services

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race national origin gender gender identity sexual orientation protected veteran status disability age or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136000/year in our lowest geographic market up to $212800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on jobrelated knowledge skills and experience. Amazon is a total compensation company. Dependent on the position offered equity signon payments and other forms of compensation may be provided as part of a total compensation package in addition to a full range of medical financial and/or other benefits. For more information please visit This position will remain posted until filled. Applicants should apply via our internal or external career site.