Security Engineer, AWS Security Incident Response

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Software Engineering

In short

AWS Security Incident Response is seeking technical Security Engineers to join their team in Bengaluru, India. The role involves responding to security incidents, identifying and recommending solutions to improve response capabilities, and providing security engineering support. The ideal candidate will have experience with programming, system administration, network security, and incident response, with a Bachelor's degree in computer science or equivalent.

Responsibilities

Respond to threat findings indicating unauthorized activity.
Identify and recommend solutions to improve AWS Security Incident Response capabilities and automation.
Provide security engineering solutions and support during customer-facing incidents.
Work alongside and mentor information security engineers to improve security and reduce risk.
Identify, evaluate, and communicate security threats, risks, and vulnerabilities and propose remediation.
Track and report on the effectiveness of AWS detective controls (e.g., Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend).
Develop processes and policies to increase security response effectiveness.
Provide periodic on-call support, including weekends.

Requirements

4+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object-oriented language experience.
4+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security experience.
4+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command-line tools (non-internship).
Bachelor's degree in computer science or equivalent.
Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
Knowledge of industry-based security vulnerabilities and remediation techniques.
Experience in security operations, risk management, and incident response.

Desired Qualifications

Experience with AWS services or other cloud offerings.
Experience triaging security alerts, front-line analysis, and escalation.
GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+, or CISSP, CISA, CISM or other security certification.
Experience with AI/ML technologies.
Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.

Benefits

Flexible work hours and arrangements.
Ongoing events and learning experiences.
Knowledge-sharing, mentorship, and career-advancing resources.

Skills

PythonRubyGoSwiftJava.NETC++HTTPDNSTCP/IPAWSGuardDutyCrowdStrike FalconWiz DefendAmazon AI

#Security Engineer#AWS#Security Incident Response#Threat Modeling#Secure Coding#Identity Management#Authentication#Software Development#Cryptography#System Administration#Network Security#Log Analysis#Command Line Tools#Networking Protocols#Security Vulnerabilities#Remediation#Security Operations#Risk Management#Incident Response#Cloud Offerings#Security Alerts#AI/ML#Penetration Testing

About Amazon

Earth's most customer-centric company

Amazon is guided by four principles: customer obsession rather than competitor focus, passion for invention, commitment to operational excellence, and long-term thinking. We are driven by the excitement of building technologies, inventing products, and providing services that change lives. We embrace new ways of doing things, make decisions quickly, and are not afraid to fail. We have the scope and capabilities of a large company, and the spirit and heart of a small one.\n\nTogether, Amazonians research and develop new technologies from Amazon Web Services to Alexa on behalf of our customers:…

See all open jobs at Amazon Read more about Amazon Website