Security Engineer – AWS Security Incident Response

About the role

The Security Engineer in AWS Security Incident Response protects customers by detecting, analyzing, and responding to security threats across AWS environments. You will work with a global team, leveraging AWS services and partner tools to investigate incidents and improve security posture.

Key responsibilities

• Respond to threat findings indicating unauthorized activity and lead incident response.
• Identify, evaluate, and communicate security threats, risks, and vulnerabilities, recommending remediation.
• Develop and maintain security automation, processes, and policies to enhance response effectiveness.
• Track and report on the effectiveness of AWS detective controls such as GuardDuty and partner products like CrowdStrike Falcon and Wiz Defend.
• Provide on‑call support, including weekends, to ensure continuous coverage.
• Monitor networks and systems, triage alerts, document suspicious activity, and collaborate with partner teams.

Required profile

• Bachelor's degree in Engineering, Computer Science, or a related field.
• Experience with web protocols, common security attacks, and remediation.
• Knowledge of systems, networking, and operating systems.
• Hands‑on coding or scripting experience in languages such as Python, C, C++, Java, Ruby, or PowerShell.
• Preferred: experience with AWS services or other cloud platforms, front‑line alert triage, and certifications like GCIH, GSEC, or Security+.

Required skills

• Python
• C, C++
• Java
• Ruby
• PowerShell
• AWS services (GuardDuty, etc.)
• CrowdStrike Falcon
• Wiz Defend
• Web protocols
• System and network administration
• Security incident response
• Threat detection and analysis

What we offer

• Opportunity to work on large‑scale security challenges for global customers.
• Collaborative environment with continuous learning and skill development.
• On‑call rotation with weekend coverage.