Amazon
Security Incident Response, Security Engineer, US Amazon Dedicated Cloud Security
$159K–$202K
Herndon, VA · Full-time · Posted Oct 27, 2026
- Experience
- 3+ years in scripting, programming, and security code review (non-internship), and 3+ years in incident response, SOC, or security operations.
- Education
- Bachelor's degree, or one of the listed certifications.
- Visa sponsorship
- Must be a U.S. citizen and currently possess and maintain an active TS/SCI security clearance with polygraph.
About the job
Detects, investigates, and responds to security threats on an air-gapped U.S. Government platform supporting a classified AI Factory.
What you'll do
- Monitor telemetry; triage, investigate, and escalate alerts.
- Manage incidents through containment, eradication, recovery, and after-action review; coordinate reporting and handoffs.
- Improve detection content and response playbooks using incident learnings.
What they ask for
- Bachelor's degree or one of the listed certifications: CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, or PenTest+.
- Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support.
- Knowledge of networking, security, databases, and Unix, Linux, and/or Windows operating systems.
- 3+ years of scripting, programming, and security code review in a common programming language (non-internship); 3+ years of incident response, SOC, or security operations experience.
Nice to have
- GCIH, GSEC, Security+, CISSP, CISA, CISM, or another security certification.
- Experience in confidential environments; familiarity with U.S. Government or IC incident-reporting requirements.
Pay
159,300.00 - 202,400.00 USD annually (base salary)
Tools
relational, NoSQL, Unix, Linux, Windows
AI focus
Security incident response for a classified AI Factory; the role does not specify developing or operating AI systems.
Model-written summary · the original posting is authoritative