Classified Incident Response Analyst (TS/SCI)

Amazon; Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon's Security team in the United States is seeking a Security Incident Response Analyst to detect, investigate, and respond to threats against a U.S. Government program building a purpose-built, classified AI Factory.

You will monitor telemetry, triage alerts, and drive incidents through containment, eradication, and recovery, turning events into improved detections and playbooks. The role requires a TS/SCI with polygraph clearance and hands-on experience in incident response, SOC, and

Qualifications

• Experience in triaging and developing security alerts, frontline analysis, and escalation support.
• Knowledge of networking fundamentals, security, databases, and operating systems (Unix/Linux/Windows).
• 3+ years of incident response, SOC, or security operations experience.
• Current, active US Government Security Clearance of TS/SCI with Polygraph.

Responsibilities

• Monitor security telemetry, triage, investigate, and escalate.
• Drive incidents through containment, eradication, recovery, and after-action.
• Develop and tune detection content and response playbooks from incident learnings.
• Coordinate incident reporting and handoffs with ISSM and Government counterparts.

Skills

Incident response

Security operations

Networking fundamentals

Operating systems

Tools

Security tooling

Job description

Amazon's Security team in the United States is seeking a Security Incident Response Analyst to detect, investigate, and respond to threats against a U.S. Government program building a purpose-built, classified AI Factory.

You will monitor telemetry, triage alerts, and drive incidents through containment, eradication, and recovery, turning events into improved detections and playbooks. The role requires a TS/SCI with polygraph clearance and hands-on experience in incident response, SOC, and