Security Engineer II, AWS Infrastructure Services Incident Response

Description
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we're the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain - and we're looking for talented people who want to help.
You'll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You'll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you'll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.
At Amazon Web Services (AWS), we provide world-class, flexible, scalable, and secure cloud services to the world's fastest-growing startups, the largest enterprises, and leading government agencies. We do this by building, maintaining, and securing one of the largest, most complex networks in the world. Within AWS, the Infrastructure Security (InfraSec) team is responsible for threat intelligence, vulnerability management, security information and event management (SIEM), incident response, and overall network security across the entire AWS global network.
The InfraSec team is looking for a Security Engineer with deep expertise in security incident response or security operations to join us as a member of the InfraSec Incident Response team. In this role, you will be responsible for leading the investigation, analysis, escalation, and remediation (performing or coordinating) of network security incidents. Additional responsibilities will include maintaining the network security incident response plan, partnership with other AWS teams, and driving after action policy and governance changes. Finally, you will partner with Threat Intelligence and Detection Engineering Security Engineers to improve the team's detection and response capabilities.
AWS leads and innovates. We don't just buy off-the-shelf software or follow others. We research and pursue the best approach for the business, whether that's building new solutions or leveraging existing ones. AWS, and InfraSec in particular, operate at massive scale and as a result, demand the highest standards, passion, and discipline for information security and software engineering. A high level of ownership and accountability is a must for this role.

Basic Qualifications

1. Bachelor's degree in computer science or equivalent
2. Knowledge of networking protocols such as HTTP, DNS and TCP/IP
3. Experience leading incident response activities in a large, globally distributed organization

Preferred Qualifications

1. 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
2. Experience with AWS products and services
3. Experience with programming languages such as Python, Java, C+
4. CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit This position will remain posted until filled. Applicants should apply via our internal or external career site.