Amazon
Security Incident Response, Security Engineer, US Amazon Dedicated Cloud Security
$159K–$202K
Herndon, VA · Full-time · Posted Oct 27, 2026
- Experience
- 3+ years of scripting, programming, and security code review in a common programming language (non-internship); 3+ years of incident response, SOC, or security operations experience.
- Education
- Bachelor's degree, or one of the listed certifications; no equivalent-experience alternative stated.
About the job
Detects, investigates, and responds to security threats on an air-gapped classified U.S. Government platform, improving detections and response playbooks from incidents.
What you'll do
- Monitor telemetry and triage, investigate, and escalate alerts.
- Lead incidents through containment, eradication, recovery, and after-action review.
- Develop and tune detection content and response playbooks; coordinate reporting and handoffs with the ISSM and Government counterparts.
What they ask for
- Bachelor's degree, or one of the listed certifications: CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, or PenTest+.
- Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support.
- Knowledge of networking, security, databases, and Unix, Linux, and/or Windows operating systems.
- Current, active US Government TS/SCI security clearance with polygraph; must be a U.S. Citizen.
Nice to have
- GCIH, GSEC, Security+, CISSP, CISA, CISM, or another security certification.
- Experience in confidential environments or familiarity with U.S. Government or IC incident-reporting requirements.
Pay
159,300.00 - 202,400.00 USD annually (base salary)
Tools
Unix, Linux, Windows, relational, NoSQL
AI focus
Responds to threats against a classified AI Factory; no AI development work is stated.
Model-written summary · the original posting is authoritative