AWS Security Operations/Incident Response Engineer, US Amazon Dedicated Cloud Security

Amazon • Herndon, VA

7d

About The Position

Amazon Web Services (AWS) is the leading cloud provider, providing
infrastructure, storage, networking, messaging, and many other services to
customers all over the world. AWS runs a globally distributed environment,
operating at massive levels of scale. Businesses, from start-ups to enterprises,
run their operations and applications on AWS’s multi-tenant infrastructure.
Governmental organizations are also looking to and depending on AWS for cloud
solutions and services.

The AWS Security Incident Response team is seeking a focused Security Engineer
who can take on a leadership role in responding to security issues in support of
our National Security program. This engineer will work as a part of a growing
team of security engineers who are focused on protecting the AWS infrastructure
that is used by our national security customers. Our security engineers perform
many duties during an average day: log analysis, incident response, forensics,
system/tooling development, and risk assessment, just to name a few. You must
thrive in high-pressure situations, think like both an attacker and defender,
and drive relevant teams to take the right actions in the right time frames to
mitigate risks. They also need to balance technical risks against business needs
and be able to articulate risks and mitigations to members of leadership at
various levels.

You should have a good mix of deep technical knowledge and a demonstrated
background in information security. We value broad and deep technical knowledge,
specifically in the fields of cryptography, network security, software security,
malware analysis, forensics, security operations, incident response, and
emergent security intelligence.

This position requires that the candidate selected be a US Citizen and must
currently possess and maintain an active TS/SCI security clearance with
polygraph.

Requirements

• Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+
• 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
• Current, active US Government Security Clearance of TS/SCI with Polygraph

Nice To Haves

• AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification
• Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture
• Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity.
• Experience with log analysis systems, like Splunk or ELK.
• Familiarity with Windows and Linux logging systems.
• Understanding of high-level cryptography principles (PKI, encryption algorithms, etc)

Responsibilities

• Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future.
• Design and coordinate cohesive responses to security events that involve multiple teams across the organization.
• Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale.
• Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences.
• Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence.
• Fulfill regular on-call responsibilities.

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level