AI-Driven Incident Response Engineer I

Amazon; Seattle (WA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

RSUs

Paid time off

Job summary

Amazon Web Services (AWS) Security Incident Response is seeking a Security Engineer I to join a team that monitors, investigates, and responds to security incidents at scale. You will triage alerts, communicate findings, and help automate responses, including AI-augmented investigation tools, across customer environments.

Your role emphasizes building runbooks, refining processes, and coordinating remediation with service teams while contributing to threat intelligence and defense in depth.

Qualifications

• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
• Experience with web protocols, common security attacks, and remediation (non-internship).
• Experience solving basic problems by writing code or scripts with some assistance.

Responsibilities

• Respond to threat findings that indicate unauthorized activity, performing triage and escalating issues as appropriate.
• Identify, evaluate, and communicate security threats, risks, and vulnerabilities, and recommend remediation actions to reduce risk.
• Contribute to security automation, scripting, and tooling efforts - including AI-augmented investigation tools - that improve the team's triage and response capabilities.
• Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend.
• Develop and refine runbooks, processes, and policies that strengthen security response effectiveness.

Skills

Threat detection

Security incident response

Automation scripting

AI-augmented tooling

Education

Bachelor's degree in Engineering/Computer Science

Job description

Amazon Web Services (AWS) Security Incident Response is seeking a Security Engineer I to join a team that monitors, investigates, and responds to security incidents at scale. You will triage alerts, communicate findings, and help automate responses, including AI-augmented investigation tools, across customer environments.

Your role emphasizes building runbooks, refining processes, and coordinating remediation with service teams while contributing to threat intelligence and defense in depth.