Security Engineer I: AI-Driven Cloud Incident Response

Socket.dev; Seattle (WA); On-site; USD 136,000 - 184,000; Full time

Job summary

Amazon Web Services (AWS) is seeking a Security Engineer I within the Security Incident Response team in Seattle. You will investigate suspicious activity, drive security response efforts, and communicate technical findings to diverse audiences.

You’ll help improve triage with AI-augmented tools and contribute to runbooks and policy enhancements. Join a 24/7 team protecting customers at scale, working with GuardDuty, CloudTrail, and other security capabilities.

Qualifications

• 2+ years in web security, incident response, or related field.
• Experience with threat detection, remediation planning and automation.
• Ability to write code or scripts to improve security workflows.

Responsibilities

• Respond to threat findings, triage and escalate as needed.
• Communicate threats, risks, and remediation steps to technical and non-technical audiences.
• Contribute to security automation and AI-augmented investigation tools.
• Track effectiveness of detective controls like GuardDuty and partner products.
• Develop runbooks, processes, and policies to strengthen response.

Skills

Web protocols

Security threat assessment

Scripting/Coding

Communication of findings

Education

Bachelor's degree in Engineering, Computer Science, or a related field

Tools

AWS

GuardDuty

CloudTrail

Security Hub

IAM

AI/ML awareness

Job description

Amazon Web Services (AWS) is seeking a Security Engineer I within the Security Incident Response team in Seattle. You will investigate suspicious activity, drive security response efforts, and communicate technical findings to diverse audiences.

You’ll help improve triage with AI-augmented tools and contribute to runbooks and policy enhancements. Join a 24/7 team protecting customers at scale, working with GuardDuty, CloudTrail, and other security capabilities.