Cloud Incident Response Engineer — Security & Automation

Amazon Web Services (AWS); Austin (TX); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amazon.com Services LLC is seeking an experienced security engineer to scale incident response across AWS. You will perform IR operations, build automated security workflows, and collaborate with service teams to deliver threat detection and secure cloud solutions at planetary scale.

The role emphasizes on-call availability, developing reusable security content, and mentoring client teams while advancing security capabilities across AWS customers.

Qualifications

• 2+ years of scripting, programming, and security code review in a non-internship role.
• Bachelor's degree in a STEM field or 2+ years of IT Security experience.
• Experience troubleshooting systems issues, analyzing logs, or automating basic tasks with command line tools.
• Experience working on CSIRT or PSIRT.
• Fluency building AI tools.

Responsibilities

• Perform and oversee incident response operations.
• Become a deep technical resource trusted by stakeholders during security events.
• Collaborate with teams to build and deploy threat detection and incident response capabilities.
• Design, build, and deploy automated security operations and IR on AWS.
• Contribute to internal projects to develop new consulting models and capabilities.
• Develop content like automation tools, reference architectures, and white papers.
• Mentor consultants, partners, and customers to raise security standards.
• On-call required.

Skills

Scripting

Programming

Security code review

CSIRT/PSIRT experience

AI tool fluency

Education

Bachelor's degree in STEM

2+ years IT Security experience

Tools

Command line tools

Networking protocols

Job description

Amazon.com Services LLC is seeking an experienced security engineer to scale incident response across AWS. You will perform IR operations, build automated security workflows, and collaborate with service teams to deliver threat detection and secure cloud solutions at planetary scale.

The role emphasizes on-call availability, developing reusable security content, and mentoring client teams while advancing security capabilities across AWS customers.