Security Engineer, AWS CIRT

As a member of the AWS Customer Incident Response Team in the AWS Security organization, you will help customers respond to security incidents and pioneer technically superb security solutions to help customers operate securely in the cloud.

Key Responsibilities

• Perform and oversee incident response operations.
• Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event.
• Contribute independently to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities.
• Design, build, and deploy solutions to automate security operations and incident response on AWS.
• Contribute to internal builder projects to develop new consulting engagement models and capabilities for customers.
• Develop high‑quality content such as automation tools, reference architectures, and white papers to help consultants, partners, and customers build on the work delivered.
• Innovate on behalf of customers by translating thoughts into actionable results.
• Mentor and invest in consultants, partners, and customers to raise the bar for our customers.
• On‑call required.

Basic Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object‑oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools.
• Bachelor’s degree in computer science or equivalent.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• Knowledge of industry‑based security vulnerabilities and remediation techniques.
• Experience performing incident response activities.
• 1+ year of experience building/operating on the AWS platform.
• 3+ years of experience in technical IT security or related job role.
• 2+ years of threat detection or incident response experience.
• Hands‑on technical experience in incident response technology, security, automation, implementation, integration, and/or deployment.

Preferred Qualifications

• 2+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security experience.
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks.
• Experience with AWS products and services.
• Hands‑on technical experience in building scripts, tools, or methodologies that enhance customers' threat detection and incident response capabilities.
• Strong scripting skills in modern scripting languages like PowerShell, Python, Node.js, JavaScript, Bash, Ruby, or SQL.
• Experience communicating complex technical matters clearly and concisely orally and in writing.
• Experience managing customers during a security event, including managing customer expectations and delivering results.
• Detailed knowledge of incident response workflows and processes.

Amazon est un employeur engagé pour l'égalité des chances. Nous sommes convaincus qu'une main d'oeuvre diversifée est essentielle à notre réussite. Nous prenons nos décisions de recrutement en fonction de votre expérience et de vos compétences. Nous apprécions votre envie de découvrir, d'inventer, de simplifier et de construire. La protection de votre vie privée et la sécurité de vos données constituent depuis longtemps une priorité absolue pour Amazon. Veuillez consulter notre Politique de Confidentialité pour en savoir plus sur la façon dont nous collectons, utilisons et traitons les données personnelles de nos candidats.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.