AWS Security Operations/Incident Response Engineer
Amazon Web Services (AWS)
Herndon, VA2h agovia LinkedIn
This job at a glance
- Who can apply
- New grads, no experience needed
- Must know
- OperationsNetwork securityIncident responseCompTIA Security+Cybersecurity
- Nice to have
- AWS
- Work
- On-site in Herndon
- Pay
- Not stated by the employer.
- Skill demand
- Operations54%Incident response37%Network security23%CompTIA Security+6%of 99 similar entry-level jobs posted in the US this week
- Listed
- Nov 11, 2026 · still open
Sign in free to see which of these skills your resume already shows.
About the Role
Amazon Web Services (AWS) is seeking a focused Security Engineer to take on a leadership role in responding to security issues in support of our National Security program. This engineer will be part of a growing team focused on protecting AWS infrastructure used by national security customers.
Key Responsibilities
- Confidently and intelligently respond to security incidents, and proactively consider how to prevent similar incidents.
- Design and coordinate cohesive responses to security events involving multiple teams.
- Build security utilities and tools for internal use to enable high-speed and wide-scale operations.
- Communicate effectively at multiple levels of sensitivity and to various audiences.
- Recognize, adopt, and instill best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence.
- Fulfill regular on-call responsibilities.
A Day in the Life
- Scan overnight security telemetry, triage alerts, and investigate anomalies.
- Analyze logs, run forensics, and coordinate responses during incidents, keeping leadership informed.
- Build tooling to enhance detection and response capabilities.
- Balance technical risks against business needs.
- Instill security best practices across the organization.
- Share on-call duty.
- Think like both an attacker and defender to protect national security customer infrastructure.
Requirements & Tech Stack
- Log analysis
- Incident response
- Forensics
- System/tooling development
- Risk assessment
- Cryptography
- Network security
- Software security
- Malware analysis
- Security operations
- Emergent security intelligence
- AWS products and services (Preferred)
Qualifications
- Associate's degree or above, OR GCIH (GIAC Certified Incident Handler), OR GSEC (GIAC Security Essentials), OR Security+
- Current, active US Government Security Clearance of TS/SCI with Polygraph
- US Citizen
- Demonstrated background in information security
- Good mix of deep technical knowledge