> Markdown version of [/jobs/ext/3449910-security-engineer-i-aws-security-incident-response](https://www.wearedevelopers.com/jobs/ext/3449910-security-engineer-i-aws-security-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer I, AWS Security Incident Response - **Company:** Amazon.com, Inc. - **Location:** United States - **Contract:** Internship / Graduate position - **Skills:** Amazon Web Services, Information Systems, Intrusion Detection and Prevention, Microsoft Security Essentials, Cybercrime, Software Coding - **Published:** September 30, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9205250/security-engineer-i-aws-security-incident-response ## About the Role AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences., Experience with web protocols, common security attacks, and remediation (non-internship) - Experience solving basic problems by writing code or scripts with some assistance - Knowledge of system, network and OS, Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ ## Description Respond to threat findings that indicate unauthorized activity has occurred - Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. - Contribute to the development of security automation and security posture improvements. - Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend - Develop processes and policies to increase security response effectiveness. - On-call support: This role requires periodic on-call responsibilities including weekends. - Hold or be able to obtain and maintain a UK Government Security Clearance - https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer's AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. ## Related Videos - [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Reliable scalability: How Amazon.com scales on AWS](https://www.wearedevelopers.com/videos/983-reliable-scalability-how-amazon-com-scales-on-aws) - [WeAreDevelopers LIVE - What Development and Tattoos Have in Common and more](https://www.wearedevelopers.com/videos/1380-wearedevelopers-live-what-development-and-tattoos-have-in-common-and-more) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)