Security Engineer I — AI‑Augmented Incident Response (AWS)

Amazon Web Services (AWS); Seattle (WA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Flexible Spending Accounts

Job summary

Amazon Web Services, Inc. in Seattle seeks a Security Incident Response Engineer to join AWS Security Incident Response. You will respond to threats, triage alerts, and coordinate remediation with service teams, working with Trust & Safety and security partners.

The role emphasizes automation, threat research, and developing runbooks to strengthen response capabilities. Ideal candidates have 2+ years in web security, a CS/engineering degree, and experience with cloud security tooling such as

Qualifications

• 2+ years of web protocols, security attacks, and remediation experience.
• Bachelor’s degree in Engineering, Computer Science, or related field.
• Knowledge of security vulnerabilities and remediation techniques including pen testing.
• Experience solving problems by writing code or scripts.

Responsibilities

• Respond to threat findings, triage, and escalate as needed.
• Identify, evaluate, and communicate threats, risks, and vulnerabilities with remediation.
• Contribute to security automation and tooling to improve triage/response.
• Track and report on effectiveness of detective controls (GuardDuty, partner tools).
• Develop and refine runbooks, processes, and policies for security response.

Skills

Web protocols

Security attacks

Remediation

Code/script writing

Threat identification

Education

Bachelor's in Engineering or CS

Tools

AWS services

GuardDuty

CloudTrail

Security Hub

Job description

Amazon Web Services, Inc. in Seattle seeks a Security Incident Response Engineer to join AWS Security Incident Response. You will respond to threats, triage alerts, and coordinate remediation with service teams, working with Trust & Safety and security partners.

The role emphasizes automation, threat research, and developing runbooks to strengthen response capabilities. Ideal candidates have 2+ years in web security, a CS/engineering degree, and experience with cloud security tooling such as