Incident Response Security Engineer
We are seeking a skilled Incident Response Security Engineer to join our team.
This role involves working within the Amazon Security Incident Response Team (SIRT) to respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data.
SIRT Security Engineers work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems.
The ideal candidate will have broad and deep technical knowledge in areas including forensics, malware analysis, network security, application security, threat hunting, and threat intelligence.
About the Job:
Job Responsibilities:
1. Responding to security incidents and coordinating a cohesive response involving multiple teams across Amazon.
2. Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future.
3. Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk.
4. Identifying and recommending solutions that improve or expand Amazon's incident response capabilities.
5. Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk.
6. Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams.
7. Keeping your knowledge and skills current with the rapidly changing threat landscape.
8. Participating in a follow-the-sun on-call rotation.
Requirements:
* Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
* Demonstrated experience in areas such as incident response, systems security, network security, and/or application security.
* Proficiency in at least one programming language.
* Technical depth in two or more specialties including digital forensics, malware analysis, network security, application security, security intelligence, and security operations.
* Understanding of security vulnerabilities, attacker exploit techniques, and their remediation methodologies.
Preferred Qualifications:
* Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support.
* 3+ years of information security experience.
* Relevant industry certifications from SANS, ISC2, etc.
* Strong demonstrated knowledge of Unix tools and architecture.
* Experience working as part of a Computer Security Incident Response Team (CSIRT).
* Familiarity/experience with AWS services and security concepts.
About Us:
We value work-life harmony and offer flexible work hours and arrangements. We strive to become Earth's Best Employer and provide ongoing DEI events and learning experiences to inspire diversity of ideas, perspectives, and voices.
We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas.