Security Incident Response Analyst for Classified AI Factory

Socket.dev; Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Security is seeking a Security Incident Response Analyst to detect, investigate, and respond to threats against a U.S. Government program building a classified AI Factory on an air-gapped platform.

The role monitors security telemetry, triages alerts, drives incidents through containment, eradication, and recovery, and collaborates with detection engineers, SOC analysts, forensics, and government counterparts to improve detections and responses.

Qualifications

• 3+ years of incident response, SOC, or security operations experience.
• Current, active US Government Security Clearance of TS/SCI with Polygraph
• Experience triaging and developing security alerts and response automation

Responsibilities

• Monitor security telemetry, triage and investigate alerts, and escalate when needed.
• Drive incidents through the full response lifecycle: containment, eradication, recovery, and after-action.
• Develop and tune detection content and response playbooks from incident learnings.
• Coordinate incident reporting and handoffs with the ISSM and Government counterparts

Skills

Incident response

Security operations

Alert triage

Tools

GIAC Certifications

Job description

Amazon Security is seeking a Security Incident Response Analyst to detect, investigate, and respond to threats against a U.S. Government program building a classified AI Factory on an air-gapped platform.

The role monitors security telemetry, triages alerts, drives incidents through containment, eradication, and recovery, and collaborates with detection engineers, SOC analysts, forensics, and government counterparts to improve detections and responses.