Security Engineer II, AWS Security Incident Response

Responsibilities

The role involves responding to security threats, identifying vulnerabilities, and contributing to security automation and posture improvements. You will also perform daily threat detection and incident response while documenting suspicious activity to protect AWS customers.

Requirements

Candidates must have a bachelor's degree in computer science or equivalent and at least 3 years of experience in programming and security code review. Proficiency in networking protocols, system troubleshooting, and log analysis is required, along with the ability to obtain UK Government Security Clearance.

Skills

• Incident response
• Threat detection
• Python
• Ruby
• Go
• Swift
• Java
• C++
• Networking protocols
• Security code review
• Log analysis
• Automation
• AWS services
• Security vulnerabilities
• Triage
• Cloud security

Benefits

• Flexible work hours
• Work-life harmony
• Mentorship
• Career-advancing resources
• Inclusive culture

About this role

AWS Applied AI Solutions (AAIS) is building toward a future where every business
innovates with Amazon AI teammates. To get there, we build AI solutions that
improve human capabilities and transform entire business functions. We create
end-to-end products that surprise and delight out-of-the-box, making complex
things easy and hard things possible, with no cloud experience required. We
start with customers who embrace the future and build bridges to meet the rest
where they are. We pursue ambitious opportunities with conviction, and we are
looking for builders who share that mindset.

AWS Security Incident Response is looking for technical Security Engineers that
are passionate about learning new concepts and work well within a team
environment to keep customers secure. We value engineers that can work through
ambiguity to identify suspicious activity, lead security response, and can
explain technical security concepts to non-technical audiences.

Key job responsibilities
• Respond to threat findings that indicate unauthorized activity has occurred
• Identify, evaluate, and communicate security threats risks and vulnerabilities
and propose recommended remediation for security issues.
• Contribute to the development of security automation and security posture
improvements.
• Track and report on the effectiveness of AWS detective controls such as Amazon
GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend
• Develop processes and policies to increase security response effectiveness.
• On-call support: This role requires periodic on-call responsibilities
including weekends.
• Hold or be able to obtain and maintain a UK Government Security Clearance -
https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels.

A day in the life
As a Security Engineer in AWS Security Incident Response your responsibilities
include monitoring networks and systems for potential threats performing triage
for security alerts documenting suspicious activity and reporting issues so they
can be adequately handled. You will work alongside our security engineers and
partner teams to perform daily threat detection and incident response using the
full capability of AWS technologies and services to detect and mitigate cyber
threats at a massive scale and help protect AWS Customers. You should also enjoy
learning about the most up-to-date new technologies and procedures to protect
information systems and data.

About the team
Amazon values diverse experiences. Even if you do not meet all of the preferred
qualifications and skills listed in the job description, we encourage candidates
to apply. If your career is just starting, hasn't followed a traditional path,
or includes alternative experiences, don't let it stop you from applying.

Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted
cloud platform. We pioneered cloud computing and never stopped innovating —
that's why customers from the most successful startups to Global 500 companies
trust our robust suite of products and services to power their businesses.

We value work-life harmony. Achieving success at work should never come at the
expense of sacrifices at home, which is why flexible work hours and arrangements
are part of our culture. When we feel supported in the workplace and at home,
there's nothing we can't achieve in the cloud.

Here at AWS, it's in our nature to learn and be curious. Our employee-led
affinity groups foster a culture of inclusion that empower us to be proud of our
differences. Ongoing events and learning experiences, including our
Conversations on Race and Ethnicity and AmazeCon conferences, inspire us to
never stop embracing our uniqueness.

We're continuously raising our performance bar as we strive to become Earth's
Best Employer. That's why you'll find endless knowledge-sharing, mentorship and
other career-advancing resources here to help you develop into a better-rounded
professional. Basic Qualifications: - Bachelor's degree in computer science or
equivalent
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP
- Knowledge of industry-based security vulnerabilities and remediation
techniques
- Experience in scripting, programming, and security code reviewing in a common
programming language (non-internship)
- Experience in troubleshooting systems issues, analyzing logs, or automating
basic tasks using command line tools (non-internship experience)
- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar
object oriented language experience
- 3+ years of scripting, programming, and security code review in a common
programming language (non-internship) experience
- 3+ years of troubleshooting systems issues, analyzing logs, or automating
basic tasks using command line tools (non-internship) experience Preferred
Qualifications: - Experience with AWS services or other cloud offerings
- Experience triaging security alerts, front-line analysis, and escalation
- GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or
Security+, or CISSP, CISA, CISM or other security certification
- Experience with AI/ML technologies
- Knowledge of system security vulnerabilities and remediation techniques,
including penetration testing and the development of exploits or equivalent

Amazon is an equal opportunities employer. We believe passionately that
employing a diverse workforce is central to our success. We make recruiting
decisions based on your experience and skills. We value your passion to
discover, invent, simplify and build. Protecting your privacy and the security
of your data is a longstanding top priority for Amazon. Please consult our
Privacy Notice (https://www.amazon.jobs/en/privacy_page
[https://www.amazon.jobs/en/privacy_page]) to know more about how we collect,
use and transfer the personal data of our candidates.

Amazon is an equal opportunity employer and does not discriminate on the basis
of protected ve...

About Amazon

Software Development · 10,001+ employees