Job description

AWS Applied AI Solutions (AAIS) is building toward a future where every business innovates with Amazon AI teammates. To get there, we build AI solutions that improve human capabilities and transform entire business functions. We create end-to-end products that surprise and delight out-of-the-box, making complex things easy and hard things possible, with no cloud experience required. We start with customers who embrace the future and build bridges to meet the rest where they are. We pursue ambitious opportunities with conviction, and we are looking for builders who share that mindset. Are you passionate about protecting customers at scale? AWS Security Incident Response is growing to meet increasing customer demand and we're looking for a Security Engineer I to join the team. In this role you will investigate suspicious activity, drive security response efforts, and communicate technical findings to both technical and non-technical audiences. You take the lessons learned from security response to enhance existing automations. The team is actively building AI-augmented investigation tools and new forensic capabilities making this a great time to join where your work directly improves secure outcomes for AWS customers. Key job responsibilities • Respond to threat findings that indicate unauthorized activity performing triage and escalating issues as appropriate • Identify evaluate and communicate security threats risks and vulnerabilities and recommend remediation actions to reduce risk • Contribute to security automation scripting and tooling efforts - including AI-augmented investigation tools - that improve the team's triage and response capabilities • Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend • Develop and refine runbooks processes and policies that strengthen security response effectiveness A day in the life You will start your day reviewing alerts and triaging potential threats across customer environments, working alongside fellow security engineers, service partner teams, and Trust & Safety Abuse. You might spend the morning investigating a suspicious finding using AWS-native tools then shift to documenting your analysis and coordinating remediation with the affected service team. Beyond daily response work you may contribute to threat research help improve triage using signals from security partners or prepare threat intelligence briefings for customers. About the team Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying. Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that's why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve in the cloud. Here at AWS, it's in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity and AmazeCon conferences, inspire us to never stop embracing our uniqueness. We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. - 2+ years of web protocols, common security attacks, and remediation (non-internship) experience - Bachelor's degree in Engineering, Computer Science, or a related field - Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent - Experience with web protocols, common security attacks, and remediation (non-internship) - Experience solving basic problems by writing code or scripts with some assistance - Experience with AWS services or other cloud offerings - * Experience with AWS services in a security context (e.g., Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) - * Familiarity with how AI/ML systems work, including concepts like confidence scoring, feedback loops, and training data - * Experience contributing to detection engineering, security automation, or building tools that improve security operations Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit amazon.jobs for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at amazon.jobs . USA, WA, Seattle - 136,000.00 - 184,000.00 USD annually

Requirements

Must-haves

Key job responsibilities
Respond to threat findings that indicate unauthorized activity performing triage and escalating issues as appropriate
Identify evaluate and communicate security threats risks and vulnerabilities and recommend remediation actions to reduce risk
Contribute to security automation scripting and tooling efforts - including AI-augmented investigation tools - that improve the team's triage and response capabilities
Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend
Develop and refine runbooks processes and policies that strengthen security response effectiveness
A day in the life
About the team
2+ years of web protocols, common security attacks, and remediation (non-internship) experience
Bachelor's degree in Engineering, Computer Science, or a related field
Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
Experience with web protocols, common security attacks, and remediation (non-internship)
Experience solving basic problems by writing code or scripts with some assistance
Experience with AWS services or other cloud offerings
Experience with AWS services in a security context (e.g., Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM)
Familiarity with how AI/ML systems work, including concepts like confidence scoring, feedback loops, and training data
Experience contributing to detection engineering, security automation, or building tools that improve security operations
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
USA, WA, Seattle - 136,000.00 - 184,000.00 USD annually

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsairestml

Platform: amazon
Effort: medium

Benefits

Benefits detected in the listing.

Health Insurance

Dental

Vision

401(K)

Paid Time Off

Parental Leave