[Remote] Customer Incident Response, AWS Security, Customer Incident Response Team

Note: The job is a remote job and is open to candidates in USA. Amazon Web Services (AWS) is seeking a member for their Customer Incident Response Team (CIRT) within the AWS CISO Office. The role involves responding to complex security incidents, building automation to enhance incident response capabilities, and contributing insights for service improvements across AWS. Responsibilities • Perform incident response for complex, novel, and large-scale customer security events via the Zipline mechanism • Serve as a deep technical resource that earns the trust of customers before, during, and after security incidents • Capture and analyze incident data to contribute intelligence to AWS Security leadership and service teams • Design, build, and deploy automation to reduce manual incident response effort and enable faster response • Develop playbooks and runbooks that enable AWS SIR and other teams to handle incident patterns at scale • Contribute to the Zipline volunteer program by training and mentoring responders across AWS Security • Support the CISO Office with incident data, insights, and situational awareness for large-scale events • Innovate on behalf of customers by asking 'what would have to be true?' to eliminate manual work and improve outcomes • Participate in 24x7 on-call rotation for incident response coverage Skills • 3+ years of IT Security experience • Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++ • Experience with AWS products and services • Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development • 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience • Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing • Experience applying threat modeling or other risk identification techniques or equivalent Benefits • Equity • Sign-on payments • Full range of medical, financial, and/or other benefits Company Overview • Launched in 2006, Amazon Web Services (AWS) began exposing key infrastructure services to businesses in the form of web services -- now widely known as cloud computing. It was founded in 2002, and is headquartered in Seattle, Washington, USA, with a workforce of 10001+ employees. Its website is Company H1B Sponsorship • Amazon Web Services (AWS) has a track record of offering H1B sponsorships, with 18969 in 2025, 21175 in 2024, 19057 in 2023, 24088 in 2022, 12233 in 2021, 14881 in 2020. Please note that this does not guarantee sponsorship for this specific role. Apply tot his job