Security Incident Response, Security Engineer, US Amazon Dedicated Cloud Security

Overview In this role you will detect, investigate, and respond to threats against a secure, air-gapped government program building a classified AI Factory. You’ll work closely with detection engineers, SOC analysts, forensics, and government counterparts to keep a high-value system defensible around the clock. You drive incidents through containment, eradication, and recovery, and translate learnings into improved detections and playbooks. This position offers hands-on incident response in a mission-focused, privacy- and security-critical environment with meaningful impact. Compensation / Benefitshealth insurance (medical, dental, vision)401(k) matchingpaid time offparential leaveRSUssign-on payments ResponsibilitiesMonitor security telemetry, triage alerts, and investigate incidents on the disconnected platformDrive full incident lifecycle from containment to recovery and after-actionDevelop and tune detection content and response playbooks from incident learningsCoordinate incident reporting and handoffs with ISSM and Government counterparts Key requirementsExperience triaging and developing security alerts and response automationFundamentals of networking, security, databases (relational or NoSQL), and operating systems (Unix, Linux, Windows)3+ years of incident response, SOC, or security operations experienceCurrent, active TS/SCI security clearance with Polygraphcollaboration with cross-functional teamscommunication under pressureproblem-solving and initiativeincident response and alert handlingsecurity operations center (SOC) practicesdetection content development and tuning