Security Incident Response Engineer (TS/SCI) Classified AI

Amazon Inc.; Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com Services LLC is seeking a Security Incident Response Analyst to detect, investigate, and respond to threats against a U.S. Government program building a purpose-built, classified AI Factory.

You will monitor security telemetry, triage alerts, drive incidents through containment, eradication, and recovery, and collaborate with detection engineers, SOC analysts, forensics, and our Government counterparts to keep the system defensible around the clock.

Qualifications

• Bachelor’s degree or security certification and 3+ years in incident response.
• Active TS/SCI with Polygraph clearance is required.
• Knowledge of networking, databases, OS (Unix/Linux/Windows).
• 3+ years scripting / programming / security code review experience.
• Experience triaging security alerts and automation in response.

Responsibilities

• Monitor security telemetry, triage alerts, and investigate incidents.
• Drive incidents through containment, eradication, and recovery.
• Develop detection content and response playbooks from lessons learned.
• Coordinate reporting with ISSM and government counterparts.

Skills

Security incident response

Security alerts triage

Networking fundamentals

Programming / scripting

Incident response / SOC experience

Education

Bachelor's degree

TS/SCI with Polygraph

Job description

Amazon.com Services LLC is seeking a Security Incident Response Analyst to detect, investigate, and respond to threats against a U.S. Government program building a purpose-built, classified AI Factory.

You will monitor security telemetry, triage alerts, drive incidents through containment, eradication, and recovery, and collaborate with detection engineers, SOC analysts, forensics, and our Government counterparts to keep the system defensible around the clock.