{"schemaVersion":"jobsearcher.job.v1","id":"f069a9ce48675de3f52de310","url":"https://jobsearcher.com/jobs/f069a9ce48675de3f52de310","canonicalUrl":"https://jobsearcher.com/jobs/f069a9ce48675de3f52de310","title":"Security Incident Response, Security Engineer, US Amazon Dedicated Cloud Security","description":"OverviewYou can get further details about the nature of this opening, and what is expected from applicants, by reading the below.In this role you will detect and respond to threats against a highly secure, air-gapped government program. You will monitor telemetry, triage alerts, and drive incidents through containment, eradication, and recovery, shaping better detections and playbooks along the way. You’ll collaborate with detection engineers, SOC analysts, forensics, and government counterparts to keep a high-value system defensible around the clock. This is a hands-on role for someone who thrives on rapid containment and turning alarms into improvements, with a clear mission to protect customer trust and government interests.Compensation / BenefitsHealth insurance (medical, dental, vision)401(k) with matchingPaid time offParental leaveRSUs and sign-on optionsCareer development and training opportunitiesResponsibilitiesMonitor security telemetry, triage alerts, investigate, and escalate on the disconnected platformLead incidents through the full response lifecycle: containment, eradication, recovery, after-actionDevelop and tune detection content and response playbooks from incident learningsCoordinate incident reporting and handoffs with the ISSM and Government counterpartsKey requirementsBachelor degree or equivalent security certifications listed in the adExperience triaging and developing security alerts and response automationFundamentals of networking, security, databases, operating systems3+ years scripting, programming, xhqgsiq and security code review3+ years incident response, SOC, or security operations experienceActive TS/SCI with Polygraph security clearance (must be current)Strong collaboration with cross-functional teamsEffective communication and escalationAnalytical problem-solving and situational awarenessSecurity telemetry monitoring and incident triageIncident response and security operationsDevelopment of detection content and automated playbooks","company":"Amazon","rawCompany":"amazon","city":"West Mclean","state":"VA","isRemote":false,"isActive":false,"createdAt":"2026-10-25T02:09:23.471Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Incident Response, Security Engineer, US Amazon Dedicated Cloud Security","description":"OverviewYou can get further details about the nature of this opening, and what is expected from applicants, by reading the below.In this role you will detect and respond to threats against a highly secure, air-gapped government program. You will monitor telemetry, triage alerts, and drive incidents through containment, eradication, and recovery, shaping better detections and playbooks along the way. You’ll collaborate with detection engineers, SOC analysts, forensics, and government counterparts to keep a high-value system defensible around the clock. This is a hands-on role for someone who thrives on rapid containment and turning alarms into improvements, with a clear mission to protect customer trust and government interests.Compensation / BenefitsHealth insurance (medical, dental, vision)401(k) with matchingPaid time offParental leaveRSUs and sign-on optionsCareer development and training opportunitiesResponsibilitiesMonitor security telemetry, triage alerts, investigate, and escalate on the disconnected platformLead incidents through the full response lifecycle: containment, eradication, recovery, after-actionDevelop and tune detection content and response playbooks from incident learningsCoordinate incident reporting and handoffs with the ISSM and Government counterpartsKey requirementsBachelor degree or equivalent security certifications listed in the adExperience triaging and developing security alerts and response automationFundamentals of networking, security, databases, operating systems3+ years scripting, programming, xhqgsiq and security code review3+ years incident response, SOC, or security operations experienceActive TS/SCI with Polygraph security clearance (must be current)Strong collaboration with cross-functional teamsEffective communication and escalationAnalytical problem-solving and situational awarenessSecurity telemetry monitoring and incident triageIncident response and security operationsDevelopment of detection content and automated playbooks","datePosted":"2026-10-25T02:09:23.471Z","dateModified":"2026-10-25T02:09:23.471Z","hiringOrganization":{"@type":"Organization","name":"Amazon","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"West Mclean","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"f069a9ce48675de3f52de310"},"url":"https://jobsearcher.com/jobs/f069a9ce48675de3f52de310"}}