Do you want to work on planetary scale security solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Services Security Organization you will have the opportunity to pioneer technically excellent security solutions supporting customer initiatives that are meaningful to their business. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. As a member of AWS CIRT, you will be able to delight customers with leading edge security incident response via AWS Security Incident Response service and Zipline mechanism.
Key job responsibilities
• Perform and oversee incident response operations
• Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event.
• Independently contribute to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities.
• Design, build, and deploy solutions to automate security operations and incident response on AWS.
• Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers.
• Develop high-quality content, such as automation tools, reference architectures, and white papers to help our consultants, partners, and customers build on the work that we deliver.
• Innovate on behalf of customers by translating your thoughts into action-oriented results.
• Mentor and invest in our employees, partners, and customers to raise the bar for our customers.
• Periodic on-call required.
• EU citizenship and residency required.Experience performing incident response activities.
1+ year building/operating on the AWS platform
3+ years in technical IT security or related job role
2+ years of threat detection or incident response experience
Hands-on technical experience in incident response technology, security, automation, implementation, integration, and/or deployment.
This role requires you to be a national of an EU member state* Hands-on technical experience in building scripts, tools, or methodologies that enhance customers’ threat detection and incident response capabilities.
* Strong scripting skills in modern scripting languages like PowerShell, Python, Node.js, Javascript, Bash, Ruby, or SQL.
* Experience communicating complex technical matters clearly and concisely orally and in writing.
* Experience managing customers during a security event, including managing customer expectations and delivering results.
* Knowledge of incident response workflows and processes
Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (
https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit
https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
