> Markdown version of [/jobs/ext/1988659-security-engineer-aws-customer-incident-response-team-cirt](https://www.wearedevelopers.com/jobs/ext/1988659-security-engineer-aws-customer-incident-response-team-cirt). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer, AWS Customer Incident Response Team (CIRT)

- **Company:** AMAZONAS HOLDINGS, LLC
- **Location:** Austin, TX, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Command-Line Interface, Code Review, Cyber Security, Computer Programming, Intrusion Detection and Prevention, Scripting, Programming Languages
- **Published:** August 8, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/security-engineer-aws-customer-incident-response-team-cirt-austin-tx-usa-58850485

## About the Role

content (automation tools, reference architectures, white papers) to enable consultants, partners, and customers * Innovate by translating ideas into actionable results * Mentor and invest in consultants, partners, and customers * On-call required Tasks * 2+ years of scripting, programming, and security code review in a common programming language * Bachelor in STEM or 2+ years IT Security experience * Experience troubleshooting systems issues, analyzing logs, or automating tasks via command line * Experience working in CSIRT or PSIRT * Fluency building AI tools (preferred) Key requirements * health insurance (medical, dental, vision) * 401(k) matching * paid time off * parential leave * RSUs * sign-on payments

## Description

Experteer Overview Join the AWS Customer Incident Response Team to help customers detect, respond to, and automate security incidents at cloud scale. You'll work with cross-functional teams to design and deploy threat detection and incident response solutions, shaping security capabilities for massive-scale services. You will act as a trusted technical advisor during security events and contribute to reusable content and automation. This role offers exposure to innovative security tooling and opportunities to mentor others while improving customer outcomes. Compensation / Benefits * Perform and oversee incident response operations * Be a deep technical resource trusted by customer stakeholders during security events * Contribute to teams deploying threat detection and incident response capabilities * Design, build, and deploy automation for security operations on AWS * Contribute to internal projects to develop new consulting engagement models and capabilities * Develop high-quality content (automation tools, reference architectures, white papers) to enable consultants, partners, and customers * Innovate by translating ideas into actionable results * Mentor and invest in consultants, partners, and customers * On-call required Tasks * 2+ years of scripting, programming, and security code review in a common programming language * Bachelor in STEM or 2+ years IT Security experience * Experience troubleshooting systems issues, analyzing logs, or automating tasks via command line * Experience working in CSIRT or PSIRT * Fluency building AI tools (preferred) Key requirements * health insurance (medical, dental, vision) * 401(k) matching * paid time off * parential leave * RSUs * sign-on payments


## Related Videos

- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss)