Assoc. Security Engineer, AWS Customer Incident Response Team (CIRT)

In this role you help customers respond to security incidents at cloud scale, shaping threat detection and incident response capabilities. You work with cross‑functional teams to implement automated security operations on AWS and develop reusable content for customers and partners. You’ll mentor teams, contribute to new consulting models, and own high-impact security initiatives. This role blends technical depth with customer focus in a fast-paced security organization.

• flexible work hours
• work-life balance
• inclusive team culture
• mentorship and career growth
• learning and development opportunities
• conversations and events focusing on diversity and inclusion

• Perform and oversee incident response operations
• Serve as a deep technical resource for customers during security events
• Build and deploy threat detection and incident response capabilities with customer and partner teams
• Design, build, and deploy automation for security operations on AWS
• Contribute to internal builder projects to develop new consulting engagement models
• Create automation tools, reference architectures, and white papers for consultants and customers
• Translate ideas into actionable security solutions for customers
• Mentor and develop consultants, partners, and customers
• On-call duty in support of incident response
• Collaborate with service teams to innovate features and security capabilities

• Scripting, programming, or security code review experience in Python, Java, or C++
• Troubleshooting systems, log analysis, and automation using command line tools
• Knowledge of networking protocols (HTTP(S), DNS, TCP/IP)
• Experience in identifying vulnerabilities, attack patterns, and remediation techniques
• Experience in security operations, risk management, and incident response
• Fluency with AI tools (as referenced)
• Experience with troubleshooting, log analysis, or automating complex tasks (non-internship)
• Experience with AWS products and services (preferred)
• Threat modeling and/or penetration testing experience (preferred)
• Strong communication skills for technical detailing (preferred)

• Strong communication and collaboration
• Mentorship and coaching mindset
• Customer focus and service excellence
• Python, Java, or C++ programming
• Log analysis and troubleshooting
• Threat detection and incident response