Security Engineer, AWS Customer Incident Response Team (CIRT)

About the role

As a member of the AWS Customer Incident Response Team in the AWS Security organization, you will help customers respond to security incidents and pioneer technically superb security solutions to help them operate securely in the cloud. You’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. The team leverages expertise and ingenuity to establish scalable security solutions for both internal and external customers that drive business outcomes.

Responsibilities

• Perform and oversee incident response operations
• Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event
• Independently contribute to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities
• Design, build, and deploy solutions to automate security operations and incident response on AWS
• Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers
• Develop high-quality content, such as automation tools, reference architectures, and white papers to help consultants, partners, and customers build on the work delivered
• Innovate on behalf of customers by translating ideas into actionable results
• Mentor and invest in consultants, partners, and customers to raise the bar for customer security
• Participate in on-call rotations

About the Team

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture: In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth: We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. You’ll find endless knowledge-sharing, training, and other career-advancing resources to help you develop into a better-rounded professional.

Work/Life Balance: We value work-life harmony. Flexible work hours and arrangements are part of our culture.

Basic Qualifications

• 2+ years of scripting, programming, and security code review in a common programming language (non-internship experience)
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
• Experience troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)
• Experience working as part of a Computer Security Incident Response Team (CSIRT) or Product Security Incident Response Team (PSIRT)
• Fluency building AI tools

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
• Experience with AWS products and services
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.