Threat Detection & Incident Response Engineer (AWS)

Amazon Eu Sarl (Uk Branch); Manchester; On-site; GBP 90,000 - 130,000; Full time

Job summary

Amazon Web Services (AWS) Security Incident Response is seeking Security Engineers who are passionate about learning and collaborating within a team to keep customers secure. This role focuses on threat detection, incident response, and communication of security concepts to non-technical audiences.

We value engineers who can manage ambiguity, work with AWS technologies at scale, and contribute to security automation. A UK Government Security Clearance is preferred or obtainable.

Qualifications

• Bachelor's degree in computer science or equivalent.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Knowledge of industry-based security vulnerabilities and remediation techniques.
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship).
• Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship).
• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience.
• 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience.

Responsibilities

• Respond to threat findings that indicate unauthorized activity has occurred.
• Identify, evaluate, and communicate security threats risks and vulnerabilities and propose recommended remediation for security issues.
• Contribute to the development of security automation and security posture improvements.
• Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend.
• Develop processes and policies to increase security response effectiveness.
• On-call support: This role requires periodic on-call responsibilities including weekends.
• Hold or be able to obtain and maintain a UK Government Security Clearance.

Skills

Networking knowledge

Scripting

Security code review

Log analysis

Programming languages

Education

Bachelor's degree in computer science or equivalent

Tools

Python

Ruby

Go

Swift

Java

.NET

C++

Job description

Amazon Web Services (AWS) Security Incident Response is seeking Security Engineers who are passionate about learning and collaborating within a team to keep customers secure. This role focuses on threat detection, incident response, and communication of security concepts to non-technical audiences.

We value engineers who can manage ambiguity, work with AWS technologies at scale, and contribute to security automation. A UK Government Security Clearance is preferred or obtainable.