Security Engineer, AWS SOC Incident Response

Security Engineer, AWS SOC Incident Response, London

Client: Amazon Data Services UK Limited

Location: London, United Kingdom

Job Reference: 23a59fac1f50

Posted: 28.04.2025 | Expiry Date: 12.06.2025

Job Description

The Amazon Web Services Security Operations Center (AWS-SOC) team manages security issues globally. We are seeking a highly motivated Security Engineer to join our team. The ideal candidate will embody our 16 leadership principles, especially 'Learn and Be Curious', 'Earn Trust', and 'Dive Deep'. The role is based at our LHR14, London SOC location and requires comfort working in a dynamic and sometimes ambiguous environment.

Key Responsibilities

1. Detect, monitor, and analyze security alerts to identify potential threats in real-time.
2. Develop, implement, and refine detection rules and correlation logic to enhance threat detection.
3. Conduct detailed investigations of security incidents, perform forensic analysis, and coordinate response activities.
4. Maintain and optimize security information and event management (SIEM) systems and other security tools.
5. Collaborate with teams to improve threat intelligence, incident response procedures, and security reporting.

A Day in the Life

As a Security Engineer in Detections, your daily tasks include safeguarding digital assets, supporting security operations, and incident response activities. Responsibilities include coordinating security responses, fine-tuning detection rules, investigating incidents, and developing detection algorithms.

About the Team

The AWS-SOC team manages security issues worldwide, ensuring the physical and logical security of customer data.

Diversity & Inclusion

Amazon Security values diverse experiences. Even if you do not meet all preferred qualifications, we encourage you to apply, especially if your career path includes alternative experiences or is just beginning.

Why Amazon Security?

Security is fundamental to customer trust and service quality. We offer talented professionals opportunities to grow across various domains including cloud, retail, devices, healthcare, and more.

Minimum Qualifications

• Bachelor's degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS, TCP/IP
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++, or similar languages

Preferred Qualifications

• Experience with AWS products and services
• Knowledge of threat modeling, secure coding, identity management, cryptography, system administration, and network security
• Proficiency in programming languages such as Python, Java, C++