AWS Security Operations & Incident Response Lead

Amazon Inc.; Herndon (VA); On-site; USD 136,000 - 184,000; Full time

Job summary

Amazon Security is seeking a capable Security Engineer to respond to incidents, coordinate cross-team responses, and build tooling for rapid and scalable defense. You will communicate across audiences about sensitivity levels and drive best practices across development, cryptography, and security operations.

On-call duties are included as part of the role. The position emphasizes protecting national security infrastructure while maintaining AWS cloud resilience and trust for GovCloud and ADC

Qualifications

• Associate’s degree or above, or GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+
• Current, active US Government Security Clearance of TS/SCI with Polygraph
• Experience with AWS products and services

Responsibilities

• Respond to security incidents and prevent recurrence.
• Coordinate responses to security events across teams.
• Build security tooling for internal use to enable fast, scalable operations.
• Communicate effectively with diverse audiences about sensitivity levels.
• Promote security best practices across development, cryptography, and operations.
• Fulfill regular on‑call responsibilities.

Skills

TS/SCI with Polygraph

Incident response

Security engineering

On-call readiness

Education

Associate’s degree or above

GCIH (GIAC Certified Incident Handler)

GSEC (GIAC Security Essentials)

Security+

Tools

AWS products and services

Job description

Amazon Security is seeking a capable Security Engineer to respond to incidents, coordinate cross-team responses, and build tooling for rapid and scalable defense. You will communicate across audiences about sensitivity levels and drive best practices across development, cryptography, and security operations.

On-call duties are included as part of the role. The position emphasizes protecting national security infrastructure while maintaining AWS cloud resilience and trust for GovCloud and ADC