Description
The AWS Security Incident Response team is looking for a Security Engineer to help protect the AWS infrastructure that national security customers rely on.
You will join a growing team that handles incident response in AWS GovCloud and U.S. Amazon Dedicated Cloud (ADC) regions, along with other security requirements specific to government customers.
You will analyze logs, investigate and respond to security events, support forensic investigations, and help build tools that enable the team to work faster and at greater scale.
Responsibilities:
- Monitor security telemetry and triage and investigate alerts in GovCloud and U.S. ADC regions.
- Support incidents from detection through containment, eradication, recovery, and after-action review.
- Perform log analysis and support forensic investigations.
- Build and improve scripts, detections, and tools that help the team work faster.
- Document findings and communicate them clearly to team members and stakeholders.
- Participate in a regular on-call rotation.
Benefits:
- Flexible work hours and arrangements
- Endless knowledge-sharing, training, and career-advancing resources
- Ongoing DEI events and learning experiences
Requirements:
- Associate's degree or above, or GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+
- Current, active US Government Security Clearance of TS/SCI with Polygraph