> Markdown version of [/jobs/ext/3324754-security-engineer-i-aws-security-incident-response](https://www.wearedevelopers.com/jobs/ext/3324754-security-engineer-i-aws-security-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer I, AWS Security Incident Response - **Company:** Amazon.com, Inc. - **Location:** Seattle, WA, United States - **Experience:** Experienced - **Salary:** $136,000.0 - $184,000.0 - **Contract:** Internship / Graduate position - **Skills:** Training Data, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Cyber Threat Analysis, Information Technology, Machine Learning Operations, Software Coding, Security Orchestration, Automation & Response - **Published:** September 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a83d8c9f6a2bd050 ## About the Role * 2+ years of web protocols, common security attacks, and remediation (non-internship) experience * Bachelor's degree in Engineering, Computer Science, or a related field * Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent * Experience with web protocols, common security attacks, and remediation (non-internship) * Experience solving basic problems by writing code or scripts with some assistance, * Experience with AWS services or other cloud offerings * * Experience with AWS services in a security context (e.g., Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) * * Familiarity with how AI/ML systems work, including concepts like confidence scoring, feedback loops, and training data * * Experience contributing to detection engineering, security automation, or building tools that improve security operations ## Description Are you passionate about protecting customers at scale? AWS Security Incident Response is growing to meet increasing customer demand, and we're looking for a Security Engineer I to join the team. In this role, you will investigate suspicious activity, drive security response efforts, and communicate technical findings to both technical and non-technical audiences. You take the lessons learned from security response to enhance existing automations. The team is actively building AI-augmented investigation tools and new forensic capabilities, making this a great time to join where your work directly improves secure outcomes for AWS customers., * Respond to threat findings that indicate unauthorized activity, performing triage and escalating issues as appropriate * Identify, evaluate, and communicate security threats, risks, and vulnerabilities, and recommend remediation actions to reduce risk * Contribute to security automation, scripting, and tooling efforts - including AI-augmented investigation tools - that improve the team's triage and response capabilities * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop and refine runbooks, processes, and policies that strengthen security response effectiveness A day in the life You will start your day reviewing alerts and triaging potential threats across customer environments, working alongside fellow security engineers, service partner teams, and Trust & Safety Abuse. You might spend the morning investigating a suspicious finding using AWS-native tools, then shift to documenting your analysis and coordinating remediation with the affected service team. Beyond daily response work, you may contribute to threat research, help improve triage using signals from security partners, or prepare threat intelligence briefings for customers. About the team AWS Security Incident Response is a team of security engineers and incident responders who provide 24/7 threat monitoring, investigation, and response for customers running workloads on AWS. The team takes signals from security partners and Trust & Safety Abuse to improve triage and prevent harm, protecting environments ranging from startups to large enterprises using services like Amazon GuardDuty and partner integrations. We are investing in AI-powered forensic tools and auto-remediation to keep pace with rapid customer growth. Team members regularly present at industry forums such as AWS re:Invent and deliver threat intelligence briefings to customers. You can grow through automation development, threat research, partner work, or contributing to internal AWS security tooling. If you want to join an inclusive team that is shaping how AWS customers stay secure, we'd love to hear from you. ## Related Videos - [Fireside Chat: Deep Learning, Deep Impact: Harnessing AI for Language Innovation](https://www.wearedevelopers.com/videos/612-fireside-chat-deep-learning-deep-impact-harnessing-ai-for-language-innovation) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Exploring 5 Key Applications of AI Abundance with Blockchain Assurance](https://www.wearedevelopers.com/videos/971-exploring-5-key-applications-of-ai-abundance-with-blockchain-assurance) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)