Amazon
Security Engineer I, AWS Security Incident Response
$136K–$184K
Seattle, WA · Full-time · Posted Sep 11, 2026
- Experience
- 2+ years of web protocols, common security attacks, and remediation (non-internship) experience.
- Education
- Bachelor's degree in Engineering, Computer Science, or a related field.
About the job
Investigates suspicious activity and leads security response work for AWS customers, while improving detection, automation, and investigation capabilities.
What you'll do
- Triage threat findings, investigate unauthorized activity, and escalate or coordinate remediation as appropriate.
- Assess and communicate security threats, risks, and vulnerabilities; recommend remediation actions.
- Improve response through security automation, AI-augmented investigation tools, detective-control reporting, and refined runbooks and processes.
What they ask for
- 2+ years of web protocols, common security attacks, and remediation (non-internship) experience.
- Bachelor's degree in Engineering, Computer Science, or a related field.
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
- Experience solving basic problems by writing code or scripts with some assistance.
Nice to have
- Experience with AWS services or other cloud offerings, including AWS services in a security context.
- Familiarity with AI/ML systems, or experience contributing to detection engineering, security automation, or security operations tools.
Pay
136,000.00 - 184,000.00 USD annually (base salary)
Tools
Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend, AWS CloudTrail, AWS Security Hub, AWS IAM
AI focus
Contributes to AI-augmented investigation tools; preferred familiarity with AI/ML concepts including confidence scoring, feedback loops, and training data.
Model-written summary · the original posting is authoritative