Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT)

AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud.

Do you want to work on planetary‑scale incident response solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast‑paced complex projects focused on game‑changing business outcomes for customers globally? As a member of the Threat Detection and Incident Response Practice in AWS Global Service Security you will help customers respond to security incidents and pioneer technically superb security solutions. You will collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges.

The Global Services Security team, a part of Amazon Web Services (AWS), leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar‑raising security outcomes and investment in security mechanisms and automation on behalf of our customers.

The AWS Customer Incident Response Team (CIRT) is a specialized 24/7 global team that provides support to customers in responding to active security events on their side of the shared security model. The team is made up of AWS Solutions Architects and Security Engineers who are experienced in incident response to assist customers with identifying indicators of compromise, isolation, containment, log collection and analysis, determining root cause, recovery, and preventative guidance to avoid recurrence.

Key job responsibilities

• Support incident response operations
• Become a technical resource that earns the trust of customer stakeholders before, during, and after a security event.
• Contribute as part of a team to build and deploy threat detection and incident response capabilities.
• Collaborate to design, build, and deploy solutions to automate security operations and incident response on AWS.
• Develop high‑quality content, such as reference architectures, white papers, and blog posts to help AWS customers secure their workloads.
• Innovate on behalf of customers by translating your thoughts into action‑driven results.
• Mentor and invest in our team, partners and customers to raise the bar for our customers.
• Periodic on‑call required.

About the team

A diverse team of experts in dozens of countries, offering varied experiences and perspectives. Amazon encourages candidates to apply even if they do not meet all preferred qualifications and skills, supporting alternative experiences and non‑traditional career paths.

Diverse Experiences

Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why AWS

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance

We value work‑life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture.

Inclusive Team Culture

AWS values curiosity and connection. Our employee‑led and company‑sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams.

Mentorship and Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. You’ll find endless knowledge‑sharing, mentorship and other career‑advancing resources here to help you develop into a better‑rounded professional.

Basic Qualifications

• Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell)
• Knowledge of networks, protocols, cloud and security fundamentals.
• 2+ years of hands‑on technical experience in threat detection, log collection and analysis, incident response, and/or security operations.

Preferred Qualifications

• Experience with any combination of core security functions such as threat modeling, secure software development, data classification, identity management and authentication, cryptography, system administration, network security, and forensics.
• Hands‑on technical experience in building scripts, tools, or methodologies that enhance customers’ threat detection and incident response capabilities.
• Experience with developing and training AI models.
• Can communicate complex technical matters clearly and concisely orally and in writing.
• Ability to manage customers expectations during security events, and deliver results.

Amazon is an equal‑opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your recruiting partner.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job‑related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign‑on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.