DESCRIPTION AWS Security is hiring an experienced security engineering leader to lead our incident response team that focuses on our US national security customers. As a Security Engineering Lead on our team, you will own building, developing, and managing a growing team of security engineers who perform many tasks: incident response, log analysis, tooling development, and risk assessment, to name a few. You will navigate complex security problems, thinking like both a hacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. You will help your team balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You also will develop key performance metrics, prioritize tasking, implement short- and long-term roadmaps and visions, and build strong relationships with our customers and external partners. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. Amazon Web Services (AWS) is the leading cloud provider, providing virtual infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS's multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon's culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren't focused on how many hours you spend at work or online. Instead, we're happy to offer a flexible schedule so you can have a more productive and well-balanced life-both in and outside of work. We're dedicated to supporting new team members. Our team has a broad mix of experience levels and Amazon tenures, and we're building an environment that celebrates knowledge sharing and mentorship. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph To request additional information, please contact Dan Hunt at We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA BASIC QUALIFICATIONS - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud or CySA (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest
- 5 years of experience leading, managing & developing high performance teams
- 5 years of experience in monitoring, incident response and security operations management
- BA/BS in computer science, information security, related discipline, or equivalent work experience
- Current, active US Government Security Clearance of TS/SCI with polygraph. PREFERRED QUALIFICATIONS - Familiarity with the US national security community, including their processes, policies, and structure.
- Strong information security risk-based prioritization abilities
- Hands-on knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
- Experience with AWS services, especially security-relevant services (ex: CloudTrail, Config, KMS, IAM)
- Intermediate level of understanding of Linux (including security-relevant logging like auditd)
- Experience with industry-standard SIEMs, like Splunk or ELK.
- A strong bias for action with proven ability to handle high stress, time sensitive security tasks
- Excellent written communication skills, with a focus on translating technically complex issues into simple, easy to understand concepts
- Ability to able to credibly coordinate between technical teams and business stakeholders
- A sense of humor! We work hard to raise the security bar for our customers, but we also know how to laugh. Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.