> Markdown version of [/jobs/ext/3992503-security-engineer-ii-aws-security-incident-response](https://www.wearedevelopers.com/jobs/ext/3992503-security-engineer-ii-aws-security-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer II, AWS Security Incident Response

- **Company:** Amazon.com, Inc.
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Internship / Graduate position
- **Skills:** Java (Programming Language), .NET Framework, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, C++ (Programming Language), Command-Line Interface, Code Review, Information Systems, Computer Programming, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Intrusion Detection and Prevention, Python (Programming Language), Machine Learning, Microsoft Security Essentials, Network Protocols, Object-Oriented Software Development, Ruby, TCP/IP, Scripting, Swift (Programming Language), Information Technology, Cybercrime, Golang, Programming Languages
- **Published:** October 28, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9269513/security-engineer-ii-aws-security-incident-response

## About the Role

AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences., Bachelor's degree in computer science or equivalent

 - Knowledge of networking protocols such as HTTP, DNS and TCP/IP
 - Knowledge of industry-based security vulnerabilities and remediation techniques
 - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
 - Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)
 - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
 - 3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
 - 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience, Experience with AWS services or other cloud offerings
 - Experience triaging security alerts, front-line analysis, and escalation
 - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+, or CISSP, CISA, CISM or other security certification
 - Experience with AI/ML technologies
 - Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent

## Description

* Respond to threat findings that indicate unauthorized activity has occurred
 * Identify, evaluate, and communicate security threats risks and vulnerabilities and propose recommended remediation for security issues.
 * Contribute to the development of security automation and security posture improvements.
 * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend
 * Develop processes and policies to increase security response effectiveness.
 * On-call support: This role requires periodic on-call responsibilities including weekends.
 * Hold or be able to obtain and maintain a UK Government Security Clearance - https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels.

A day in the life
As a Security Engineer in AWS Security Incident Response your responsibilities include monitoring networks and systems for potential threats performing triage for security alerts documenting suspicious activity and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data.