Join AWS Security Incident Response as a technical Security Engineer passionate about continuous learning and collaborative problem-solving to safeguard customers. We seek individuals adept at navigating ambiguity to detect suspicious activity, lead incident response efforts, and articulate complex security concepts to diverse audiences.

AWS Global Services empowers customers to design, build, operate, and secure their cloud environments. Our team offers expertise in areas like AWS Partners, Sovereign Cloud, International Product, and Generative AI, fostering innovation across dozens of countries.

AWS Services provides scalable cloud infrastructure, including S3, EC2, and CloudFront, enabling businesses of all sizes to build and grow on the AWS Platform. We are driven by invention and a commitment to solving complex challenges with elegant solutions.

Respond to threat indicators suggesting unauthorized activity. Identify, assess, and communicate security threats, risks, and vulnerabilities, proposing effective remediation strategies. Contribute to the enhancement of security automation and posture. Monitor and report on the efficacy of AWS detective controls like Amazon GuardDuty and third-party products. Develop and refine processes and policies to boost security response efficiency. This role involves periodic on-call duties, including weekends.

Demonstrate 3+ years of programming experience in object-oriented languages such as Python, Ruby, Go, Swift, Java, .Net, or C++. Possess 2+ years of experience in scripting, programming, and security code review using common programming languages (excluding internships). Have 2+ years of experience troubleshooting system issues, analyzing logs, or automating tasks with command-line tools (excluding internships). Hold a Bachelor's degree in Computer Science or a related field. Possess knowledge of networking protocols like HTTP, DNS, and TCP/IP. Familiarity with industry-standard security vulnerabilities and their remediation techniques is essential. Experience in scripting, programming, and security code reviewing within a common programming language. Proficiency in troubleshooting system issues, analyzing logs, or automating basic tasks using command-line utilities.