Security Engineer, AWS CIRT

Do you want to work on planetary scale incident response solutions in the cloud Are you skilled at performing Security Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally As a member of the AWS Customer Incident Response Team in the AWS Security organization you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Building on those experiences youll collaborate with AWS service teams on new features innovate with new technologies and explore new challenges.

The AWS Customer Incident Response team a part of AWS Security leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the worlds workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers

Cloud security is our highest priority at AWS. As an AWS customer you benefit from an environment built to meet the requirements of the most security-sensitive organizations. As an AWS Security team member you will help secure that environment for our customers while working on security products for a variety of platforms and technologies all operating at massive scale.

We are looking for an experienced security engineer with an ability to scale security and make the right trade-off decisions that enable us to offer secure innovative solutions to customers.

Key job responsibilities
Perform and oversee incident response operations
Become a deep technical resource that earns the trust of customer stakeholders before during and after a security event.
Independently contribute to teams that include Amazonians partners and customers to build and deploy threat detection and incident response capabilities.
Design build and deploy solutions to automate security operations and incident response on AWS.
Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers.
Develop high-quality content such as automation tools reference architectures and white papers to help our consultants partners and customers build on the work that we deliver.
Innovate on behalf of customers by translating your thoughts into actionable results.
Mentor and invest in our consultants partners and customers to raise the bar for our customers.
On-call required.


A day in the life
Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description we encourage candidates to apply. If your career is just starting hasnt followed a traditional path or includes alternative experiences dont let it stop you from applying.

Why AWS
Amazon Web Services (AWS) is the worlds most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating thats why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home theres nothing we cant achieve in the cloud.

Inclusive Team Culture
Here at AWS its in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences inspire us to never stop embracing our uniqueness.

Mentorship and Career Growth
Were continuously raising our performance bar as we strive to become Earths Best Employer. Thats why youll find endless knowledge-sharing mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

- 3 years of programming in Python Ruby Go Swift C or similar object oriented language experience
- 2 years of scripting programming and security code review in a common programming language (non-internship) experience
- 2 years of troubleshooting systems issues analyzing logs or automating basic tasks using command line tools (non-internship) experience
- Bachelors degree in computer science or equivalent
- Knowledge of networking protocols such as HTTP DNS and TCP/IP
- Knowledge of industry-based security vulnerabilities and remediation techniques
- Experience in scripting programming and security code reviewing in a common programming language (non-internship)
- Experience in troubleshooting systems issues analyzing logs or automating basic tasks using command line tools (non-internship experience)
- - Experience performing incident response activities
- - 1 years of experience building/operating on the AWS platform
- - 3 years of experience in technical IT security or related job role
- - 2 years of threat detection or incident response experience
- - Hands-on technical experience in incident response technology security automation implementation integration and/or deployment.

- 2 years of any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
- Knowledge of command line tools to troubleshoot protocols analyze log outputs or automate basic tasks
- Knowledge of networking protocols such as HTTP(S) DNS and TCP/IP
- Experience with AWS products and services
- Experience in scripting programming or security code reviewing in a common language such as Python Java or C
- Hands-on technical experience in building scripts tools or methodologies that enhance customers threat detection and incident response capabilities.
- Strong scripting skills in modern scripting languages like PowerShell Python Javascript Bash Ruby or SQL.
- Experience communicating complex technical matters clearly and concisely orally and in writing.
- Experience managing customers during a security event including managing customer expectations and delivering results.
- Detailed knowledge of incident response workflows and processes

Amazon est un employeur engagé pour légalité des chances. Nous sommes convaincus quune main doeuvre diversifée est essentielle à notre réussite. Nous prenons nos décisions de recrutement en fonction de votre expérience et de vos compétences. Nous apprécions votre envie de découvrir dinventer de simplifier et de construire. La protection de votre vie privée et la sécurité de vos données constituent depuis longtemps une priorité absolue pour Amazon. Veuillez consulter notre Politique de Confidentialité pour en savoir plus sur la façon dont nous collectons utilisons et traitons les données personnelles de nos candidats.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.