Associate Security Engineer, AWS CIRT

About the role

Do you want to work on planetary‑scale incident response solutions in the cloud? Are you skilled at performing Security Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? As a member of the AWS Customer Incident Response Team in the AWS Security organization, you will help customers respond to security incidents, pioneer technically superb security solutions, and collaborate with AWS service teams on new features, innovative technologies, and new challenges.

Responsibilities

• Perform and oversee incident response operations, earning the trust of customer stakeholders before, during, and after a security event.
• Contribute independently to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities.
• Design, build, and deploy solutions to automate security operations and incident response on AWS.
• Contribute to internal builder projects that develop new consulting engagement models and capabilities for customers.
• Develop high‑quality content such as automation tools, reference architectures, and white papers to help consultants, partners, and customers.
• Innovate on behalf of customers by translating ideas into actionable results.
• Mentor and invest in consultants, partners, and customers to raise the bar for security outcomes.
• Participate in on‑call rotations.

About the Team

Amazon Security values diverse experiences and encourages candidates with non‑traditional backgrounds to apply. The organization is responsible for maintaining a high security bar across all Amazon products and services, offering opportunities to work on cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The team culture emphasizes curiosity, continuous learning, DEI events, and a focus on work‑life harmony with flexible hours and arrangements.

Basic Qualifications

• 2+ years of experience with web protocols, common security attacks, and remediation (non‑internship).
• Bachelor’s degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploit development.
• Experience solving basic problems by writing code or scripts with some assistance.

Preferred Qualifications

• Experience with AWS services or other cloud offerings.
• Experience applying threat modeling or other risk identification techniques.
• Background in application security architecture, security code reviews, security testing, incident response, or security infrastructure.
• Experience troubleshooting networks (TCP/IP, DNS, routing, switching, firewalls, LAN/WAN, traceroute, iperf, dig, curl).

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription).
• Basic Life & AD&D insurance with optional supplemental life plans.
• Employee Assistance Program and mental health support.
• Medical Advice Line.
• Flexible Spending Accounts.
• Adoption and surrogacy reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.
• Sign‑on payments and restricted stock units (RSUs) as part of the compensation package.

Pay

Base salary range: $136,000 – $184,000 USD annually (Austin, TX and Seattle, WA). Compensation includes sign‑on payments, RSUs, and is determined based on experience, qualifications, and location.