{ "count" : 184993, "data" : [ { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145474d8ee00a00bb3b2", "title" : "Senior Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services Japan GK", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "JPY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Tokyo, Japan, adjusted for AWS's size and the technology industry." }, "location" : "Tokyo, JPN", "locations" : [ "Tokyo, JPN" ], "certifications" : [ "GCIH", "GSEC", "GREM", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T08:24:56.602", "fingerprint" : "a57d3db022abec12088d7bb9660b2ed2ff73f018f6b5050988fd19a160c05a1a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "externalId" : "79b6888c-343c-4289-bbab-a95d6a41e1f2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tokyo", "country" : "Japan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "35.6768601,139.7638947" } ], "locationText" : "Tokyo, Japan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, C++, AWS, Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM", "professionalSkills" : [ "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations" ], "hardSkillsList" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Command line tools", "level" : "intermediate" }, { "name" : "Security issue identification", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Incident Response, Automation, AI Feedback Loops, Detection Engineering", "majorSkillsList" : [ "Security Incident Response", "Automation", "AI Feedback Loops", "Detection Engineering" ], "coreResponsibilities" : "Build automation mechanisms, Investigate complex security incidents, Build frameworks for scalable detection, Build frameworks for auto-remediation, Architect AI feedback loops, Respond to threats, Build detection enhancements, Build auto-remediation playbooks, Build AI training pipelines, Lead incident response for customers, Scope blast radius, Coordinate containment, Guide remediation, Walk customers through compromises, Build pipelines to capture investigation patterns, Translate patterns into detection rules, Translate patterns into auto-remediation, Measure impact on investigation volume, Measure impact on investigation accuracy, Build mechanisms for engineer contribution, Build AI feedback loops, Improve autonomous investigation accuracy, Define and track metrics, Measure automation effectiveness, Reduce false positives, Increase auto-resolution coverage, Track engineer contribution rates, Mentor junior engineers, Structure artifacts as reusable automation inputs, Participate in on-call rotations, Review automation dashboard metrics, Investigate new attack patterns, Analyze malware behavior, Extract indicators, Build detection rules, Step into high-severity incidents, Analyze logs, Correlate indicators across accounts, Codify attack chains, Improve AI agent performance, Review and approve detection rule contributions", "teamCollaboration" : "Cross-functional teams; Leadership collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Attack patterns; Supply chain attacks; Cryptomining; Cloud-native architecture; Security operations", "domainList" : [ "attack-patterns", "supply-chain-attacks", "cryptomining", "cloud-native-architecture", "security-operations" ], "domainSpecificKnowledge" : [ "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "Security operations" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Customer calls; Executive presentations", "continuousLearning" : "One-on-one coaching", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decision making", "specialRequirements" : "On-call rotation, 24/7 follow-the-sun operating model", "outcomesObjectives" : "Reduce false positives; Increase auto-resolution coverage; Improve autonomous investigation accuracy", "qualificationsBasic" : "5+ years scripting, programming, or security code review, Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, Speak, write, and read fluently in Japanese, 5+ years troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans, Experience in industry-based security vulnerabilities identification, attack patterns, and remediation, Experience as a mentor, tech lead, or leading an engineering team", "qualificationsPreferred" : "Master's degree in Computer Science, Information Security, or a related field, Experience in automation or monitoring frameworks, deployment or development, Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent), Experience with AWS services in a security operations context", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for a Senior Security Engineer who builds the automation mechanisms that scale security response. You will investigate complex security incidents hands-on, build the frameworks that turn investigation expertise into scalable detection and auto-remediation, and architect the AI feedback loops that make the service smarter with every investigation. The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve over 90% of routine investigations within minutes. The next challenge is building the mechanisms that accelerate this further — enabling every engineer on the team to contribute to detection and automation quality from their investigation work. Your deep understanding of how attacks work — from initial exploitation through lateral movement to data exfiltration — is what makes your automation effective. You will build detection enhancements, auto-remediation playbooks, and AI training pipelines that catch real threats, not just generate noise. We treat every investigation as a confirmed security incident until the data proves otherwise. Native Japanese language skills and fluent English language skills in speaking, reading, and writing. Key job responsibilities - Investigate and respond to complex security incidents hands-on — applying malware analysis, forensic analysis, or attribution skills to credential compromise, data exfiltration, supply chain attacks, and cryptomining - Lead incident response for customers during high-severity events: scope blast radius, coordinate containment, guide remediation, and get on calls with customers to walk them through what was compromised and the specific steps to contain the threat - Own the response-to-automation flywheel: build pipelines that capture investigation patterns (including Trust & Safety abuse cases), translate them into detection rules and auto-remediation, and measure impact on investigation volume and accuracy - Build mechanisms that enable every engineer on the team to contribute detection rules, automation playbooks, and AI training data — and build the AI feedback loops that ensure human corrections systematically improve autonomous investigation accuracy - Define and track metrics that measure automation effectiveness: false positive reduction, auto-resolution coverage, and engineer contribution rates to the pipeline - Mentor junior engineers on investigation methodology and structuring artifacts as reusable automation inputs - Participate in on-call rotations as part of the 24/7 follow-the-sun operating model, including weekends A day in the life - Review automation dashboard metrics: AI agent resolution rates, false positive trends, and engineer-submitted detection rules going live - Investigate new attack patterns the AI is struggling with — analyze malware behavior, extract indicators, and build detection rules that catch the pattern without generating false positives - Step into high-severity incidents directly — analyzing logs, correlating indicators across accounts, scoping blast radius, and getting on a call with the customer to guide containment - Codify attack chains from investigations into detection rules and AI agent improvements so the system catches the pattern autonomously next time - Review and approve detection rule contributions from junior engineers using your contribution framework About the team The AWS Security Incident Response team provides 24/7 threat monitoring, investigation, and response for customer AWS environments. The team is driving a strategic transformation — raising operational standards, building AI-powered investigation capabilities, and expanding coverage. We respond to customer requests within minutes. Zero queue tolerance is the operating standard. We value engineers who solve root causes over those who close tickets. Senior engineers enjoy close collaboration with leadership, one-on-one coaching, and the opportunity to shape the future of security operations at AWS scale. Basic Qualifications: - 5+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - Speak, write, and read fluently in Japanese - 5+ years of non-internship experience in troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques; including experience as a mentor, tech lead, or leading an engineering team Preferred Qualifications: - Master's degree in Computer Science, Information Security, or a related field - Experience in automation or monitoring frameworks, deployment or development - Knowledge of compliance and security standards across the enterprise IT landscape - * Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent) - * Experience with AWS services in a security operations context (Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Engineer, AWS Security Incident Response at Amazon Web Services Japan GK. Skills: Security Incident Response, Automation, AI Feedback Loops, Detection Engineering. Build automation mechanisms. Investigate complex security incidents", "postedDate" : "2026-06-13T18:41:50.371", "createdAt" : "2026-06-13T18:41:50.371", "lastUpdated" : "2026-06-15T08:24:56.602", "ingestTimestamp" : "2026-06-13T18:41:50.371", "mongoId" : "6a25145474d8ee00a00bb3b2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation", "Mentoring", "Security Incident Response", "AI Feedback Loops", "Detection Engineering", "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations", "Roadmap planning", "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "GCIH", "GSEC", "GREM", "GCFA", "CISSP", "AWS" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69cf3f052beec4dd3d9340a4", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect" ], "timestamp" : "2026-06-15T08:10:44.516", "fingerprint" : "e7b6067f8d5e1ee3cf111fd915ee7bae8c724b95799fbd946bdb1b7400dc7409", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382311/apply", "externalId" : "49079c29-efa4-48bb-96db-5c916f303463", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Java, C++, HTTP(S), DNS, TCP/IP, Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, AWS", "professionalSkills" : [ "Risk assessment", "Security engineering" ], "hardSkillsList" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System tooling development", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design cohesive responses, Coordinate responses across teams, Build security utilities, Build security tools, Communicate effectively", "teamCollaboration" : "Multiple teams across organization; Fellow Security Engineers", "domainKnowledge" : "Cloud security; National security; Cryptography; Network security; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; AWS services", "domainList" : [ "cloud-security", "national-security", "cryptography", "network-security", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "aws-services" ], "domainSpecificKnowledge" : [ "Cloud security", "National security", "Cryptography", "Network security", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "AWS services" ], "toolProficiency" : [ "Splunk", "ELK" ], "communicationSkills" : "Communicate at multiple levels; Communicate to multiple audiences", "problemSolvingSkills" : "Think like attacker; Think like defender; Mitigate risks", "specialRequirements" : "US Citizen, TS/SCI with polygraph, On-call responsibilities", "qualificationsBasic" : "Bachelor's degree or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+, 2+ years scripting or programming or security code review, Knowledge of networking protocols, Current, active US Government Security Clearance of TS/SCI with Polygraph", "qualificationsPreferred" : "AWS certification, Cloud Technology Certification, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux/Unix tools, Knowledge of Linux/Unix architecture, Deep understanding of AWS service catalog, Used AWS services in production, Experience with log analysis systems, Familiarity with Windows logging systems, Familiarity with Linux logging systems, Understanding of high-level cryptography principles", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity. - Experience with log analysis systems, like Splunk or ELK. - Familiarity with Windows and Linux logging systems. - Understanding of high-level cryptography principles (PKI, encryption algorithms, etc) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T14:00:19.237", "createdAt" : "2026-06-13T14:00:19.237", "lastUpdated" : "2026-06-15T08:10:44.516", "ingestTimestamp" : "2026-06-13T14:00:19.237", "mongoId" : "69cf3f052beec4dd3d9340a4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382311/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence", "Leadership", "Cloud security", "Security engineering", "National security", "AWS services", "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect", "Splunk", "ELK" ], "skillCount" : 34, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Security" }, { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69d5e4962beec4dd3d931981", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:08:07.757", "fingerprint" : "0c97d9ed2d550c199650d60b2166fb48eb0e947fd71728e016fa19334f04915f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385139/apply", "externalId" : "f0a1c5b4-3fd4-4296-8fb3-027521c0d98b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence", "professionalSkills" : [ "Risk assessment", "Information security" ], "hardSkillsList" : [ "Log analysis", "Forensics", "System development", "Tool development" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System development", "level" : "intermediate" }, { "name" : "Tool development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design security responses, Coordinate security responses, Build security utilities, Build security tools, Communicate effectively, Instill best practices", "teamCollaboration" : "Multiple teams across organization; Security engineers", "domainKnowledge" : "Cloud security; National security program", "domainList" : [ "cloud-security", "national-security-program" ], "domainSpecificKnowledge" : [ "Cloud security", "National security program" ], "communicationSkills" : "Communicate at multiple levels", "problemSolvingSkills" : "Think like attacker; Think like defender", "specialRequirements" : "On-call responsibilities, US Citizen, TS/SCI with polygraph", "qualificationsBasic" : "Associate's degree or above, GCIH or GSEC or Security+, Current, active US Government Security Clearance of TS/SCI with Polygraph, US Citizen", "qualificationsPreferred" : "Experience with AWS products and services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing virtual infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities You should be able to accomplish most of the following: - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Associate's degree or above - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T01:35:14.469", "createdAt" : "2026-06-13T01:35:14.469", "lastUpdated" : "2026-06-15T02:08:07.757", "ingestTimestamp" : "2026-06-13T01:35:14.469", "mongoId" : "69d5e4962beec4dd3d931981", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385139/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Forensics", "System development", "Tool development", "Leadership", "Incident response", "Security operations", "Cloud security", "Risk assessment", "Information security", "National security program", "GCIH", "GSEC", "Security+" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1. Security Monitoring & Threat Detection : · Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. · Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. · Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2. Incident Response & Remediation : · Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. · Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. · Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. · Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. · Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. · Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3. Tool Administration and Management of SOC Solutions : · Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. · Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. · Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. · Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. · Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. · Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4. Collaboration, Automation, and Innovation Activities : · Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. · Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5. Documentation, Reporting, and Compliance Activities : · Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. · Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. · Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. · Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) · Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) · Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures · Bachelor’s degree in Computer Science, Information Security, or related field · Master’s degree preferred · Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent · Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary · Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. · Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership · Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review · Analytical mindset with attention to detail · Excellent communication and documentation skills · Ability to work under pressure and manage multiple incidents simultaneously · Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5f4074d8ee00a08ea55f", "title" : "Security Incident Response Lead", "company" : "Nscale", "industry" : "AI Infrastructure", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-15T02:45:24.541", "fingerprint" : "97da22b2e3f980604e8d6395c438f3f52604ff35672fecd27a2405a86ad0765f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4824321101", "externalId" : "4824321101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud infrastructure, SIEM, EDR/XDR, Automation", "professionalSkills" : [ "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering" ], "hardSkillsList" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Forensics techniques", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Incident lifecycles", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Cloud security", "majorSkillsList" : [ "Incident response", "Digital forensics", "Cloud security" ], "coreResponsibilities" : "Lead end-to-end security incident response, Act as incident commander, Coordinate cross-functional response efforts, Conduct investigations, Oversee investigations, Apply digital forensics techniques, Drive containment efforts, Drive eradication efforts, Drive recovery efforts, Contribute to threat hunting, Contribute to proactive investigations, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation frameworks, Establish escalation frameworks, Lead post-incident reviews, Lead root cause analysis, Drive long-term remediation actions, Partner to improve alerting, Partner to improve triage, Partner to improve response workflows, Build incident response tooling, Scale incident response tooling, Enhance case management systems", "teamCollaboration" : "Cross-functional response efforts; Partner with Detection & Response; Coordinate with Infrastructure; Coordinate with IT; Coordinate with Legal; Coordinate with Compliance", "domainKnowledge" : "AI infrastructure; High-performance computing; Large-scale distributed systems; Attack techniques; Threat actors; Incident lifecycles; Cloud environments; Production environments", "domainList" : [ "ai-infrastructure", "high-performance-computing", "large-scale-distributed-systems", "attack-techniques", "threat-actors", "incident-lifecycles", "cloud-environments", "production-environments" ], "domainSpecificKnowledge" : [ "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Incident lifecycles", "Cloud environments", "Production environments" ], "toolProficiency" : [ "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "communicationSkills" : "Brief leadership; Coordinate across teams", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "End-to-end IR effectiveness; High-severity incident coordination; Post-incident review completion; Remediation completion; IR tooling maturity; Automation maturity; Workflow maturity", "qualificationsBasic" : "8-12+ years incident response experience, 8-12+ years security operations experience, 8-12+ years digital forensics experience, Proven experience leading high-severity investigations, Hands-on experience with SIEM, Hands-on experience with EDR/XDR, Hands-on experience with detection tooling, Operate as technical leader, Make decisions under pressure, Brief leadership, Coordinate across teams", "qualificationsPreferred" : "Experience in AI infrastructure, Experience in high-performance computing, Experience in large-scale distributed systems, Familiarity with detection engineering, Familiarity with threat hunting, Familiarity with building automation for IR", "remoteFriendly" : true, "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Security Incident Response Lead to own and evolve Nscale’s incident response capability in a high-scale, AI-native environment. This is a hands-on leadership role focused on leading investigations across infrastructure, enterprise systems, and security events, while driving effective containment, eradication, and recovery. The role operates at the center of incident coordination and partners closely with Detection & Response as well as cross-functional stakeholders including Infrastructure, IT, Legal, and Compliance. You will help shape how Nscale detects and responds to threats by building the processes, tooling, and operational rigor behind the incident response function. This role is critical to strengthening the organization’s security posture and ensuring high-severity events are managed with speed, clarity, and technical depth. This role will be part of the global CISO organization. What you'll be doing Incident Leadership & Coordination Lead end-to-end security incident response across the organization Act as the incident commander for high-severity events Coordinate cross-functional response efforts with Infrastructure, IT, Legal, and Compliance Participate in and help design on-call and escalation rotations Investigations & Forensics Conduct and oversee investigations across endpoints, cloud, and infrastructure systems Apply digital forensics techniques across logs, endpoints, and cloud environments Drive containment, eradication, and recovery efforts for active security incidents Contribute to threat hunting and proactive investigations Process, Playbooks & Operational Rigor Develop and maintain incident response playbooks and runbooks Establish escalation frameworks to support effective incident handling Lead post-incident reviews and root cause analysis efforts Drive long-term remediation actions following incidents Tooling & Response Improvement Partner with Detection & Response teams to improve alerting, triage, and response workflows Build and scale incident response tooling and automation Enhance case management systems that support investigation and response operations KPIs End-to-end security incident response effectiveness High-severity incident coordination and command Post-incident review and remediation completion Incident response tooling, automation, and workflow maturity About You 8–12+ years of experience in incident response, security operations, or digital forensics Proven experience leading complex, high-severity incident investigations in cloud or distributed environments Strong expertise in forensics and investigation techniques across endpoints, cloud, and logs Hands-on experience with SIEM, EDR/XDR, and detection tooling Familiarity with cloud infrastructure and modern production environments Deep understanding of attack techniques, threat actors, and incident lifecycles Ability to operate as a technical leader during incidents and make decisions under pressure Strong communication skills with the ability to brief leadership and coordinate across teams Experience in AI infrastructure, high-performance computing, or large-scale distributed systems is a plus Familiarity with detection engineering, threat hunting, or building automation for incident response workflows is beneficial What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $150,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Security Incident Response Lead at Nscale. Skills: Incident response, Digital forensics, Cloud security. Lead end-to-end security incident response. Act as incident commander", "postedDate" : "2026-06-12T22:26:36.876", "createdAt" : "2026-06-12T22:26:36.876", "lastUpdated" : "2026-06-15T02:45:24.541", "ingestTimestamp" : "2026-06-12T22:26:36.876", "mongoId" : "6a2c5f4074d8ee00a08ea55f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles", "Leadership", "Cloud security", "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering", "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Cloud environments", "Production environments", "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI Infrastructure" }, { "id" : "68b706967fc9a711f0f6f106", "title" : "Senior Security Incident Response Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:15:22.523", "fingerprint" : "557fc71c43f8425ad3ede7e1896c755a137ec1863b4d9868b798c7018c19161b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3054814/apply", "externalId" : "9b21d22c-d0c3-4bd6-9b1b-3f576fbb97c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Malware analysis, Forensics, Security operations, Incident response, Security automation, Cloud computing, AWS", "professionalSkills" : [ "Security engineering", "Threat landscape", "Security automation tooling" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention" ], "softSkillsList" : [ "Creative problem solving", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Programmatic automation", "level" : "intermediate" }, { "name" : "Security issue prevention", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative problem solving" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security automation, Cloud security", "majorSkillsList" : [ "Incident response", "Security automation", "Cloud security" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities, Design and build tooling, Enable programmatic automation, Lead security engineer, Provide security guidance, Provide technical guidance, Influence process and priorities, Improve security outcomes, Provide strategic guidance, Bar raise security issues, Escalate security issues, Identify prevention opportunities, Mentor junior engineers, Develop junior engineers", "teamCollaboration" : "Global team environment; Multiple security teams; Cross-functional teams", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider security", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider-security" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider security" ], "toolProficiency" : [ "SOAR platforms", "SIEM platforms" ], "communicationSkills" : "Oral communication; Written communication", "continuousLearning" : "Learning about security domains", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Creative problem solving; Critical problem solving", "outcomesObjectives" : "Improve security outcomes", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 7+ years systems/network/application security, 5+ years on Security team, 1 year programming/scripting language, Experience leading junior engineers", "qualificationsPreferred" : "Excellent written/verbal communication, 7+ years security response/automation/threat intelligence, Malware analysis experience, Forensics experience, SOAR platforms experience, SIEM platforms experience, Experience with MS Windows, Linux, MacOS, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services team is looking for a passionate Senior Security Incident Response Engineer who can lead the response to security issues across the largest cloud provider in the world. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! You’ll apply your creative and critical problem solving skills to quickly design and build tooling that enables programmatic automation at a massive scale. You must have a passion for engineering solutions to complex security challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about information security, the threat landscape and security automation and tooling. Key job responsibilities - Work across multiple security teams as a lead security engineer providing security and technical guidance. - Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes - Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications - Bar raise security issues and escalate appropriately - Identify opportunities to prevent security issues at scale - Mentor and develop teammates both technically and professionally About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. - 7+ years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 5+ years experience on a Security team, especially experience coordinating responses to security incidents. - 1 year proficiency with one high-level programming or scripting language. - Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications: - Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences. - 7+ years experience working in security response, security automation tooling, or threat intelligence. - Experience with malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS) - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Security Incident Response Engineer at Amazon.com Services LLC. Skills: Incident response, Security automation, Cloud security. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T10:52:46.897", "createdAt" : "2026-06-13T10:52:46.897", "lastUpdated" : "2026-06-15T03:15:22.523", "ingestTimestamp" : "2026-06-13T10:52:46.897", "mongoId" : "68b706967fc9a711f0f6f106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3054814/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention", "Creative problem solving", "Critical thinking", "Incident response", "Security automation", "Cloud security", "Security engineering", "Threat landscape", "Security automation tooling", "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Cloud provider security", "SOAR platforms", "SIEM platforms" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2c68fa74d8ee00a0905806", "title" : "Senior Incident Response Specialist, Cyber Security", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Response Specialist in Kuala Lumpur, Malaysia, adjusted for the cybersecurity industry and senior experience level." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "timestamp" : "2026-06-16T02:39:21.304", "fingerprint" : "d361c038e80e7ee25f06c2708e696babafce6881749e9a55b1eb9bfeb96da610", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f8691c89-168e-4178-9678-8a9d39b9914d/application", "externalId" : "f8691c89-168e-4178-9678-8a9d39b9914d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Elastic Stack, SIEM, Cloud", "professionalSkills" : [ "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding" ], "hardSkillsList" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises" ], "hardSkills" : [ { "name" : "Security alerts", "level" : "intermediate" }, { "name" : "Security events", "level" : "intermediate" }, { "name" : "Malware investigation", "level" : "intermediate" }, { "name" : "Phishing investigation", "level" : "intermediate" }, { "name" : "Insider threats", "level" : "intermediate" }, { "name" : "Cloud breaches", "level" : "intermediate" }, { "name" : "Detection rule creation", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Simulation exercises", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" } ], "majorSkills" : "Incident Response, Cyber Security, SIEM platform", "majorSkillsList" : [ "Incident Response", "Cyber Security", "SIEM platform" ], "coreResponsibilities" : "Monitor security alerts, Investigate security alerts, Analyze security incidents, Contain security incidents, Escalate security incidents, Tune SIEM rules, Suggest new detections, Analyze logs, Correlate logs, Create incident documentation, Maintain incident documentation, Create incident reports, Maintain incident reports, Create lessons learned, Maintain lessons learned, Support playbook execution, Remediate incidents, Perform root cause analysis, Provide use case insights, Validate use cases, Test use cases, Escalate confirmed incidents, Participate in reviews, Improve processes, Improve detections, Validate security events, Identify legitimate threats, Investigate malware incidents, Investigate phishing incidents, Investigate insider threats, Investigate cloud breaches, Assist in rule creation, Assist in rule tuning, Map MITRE ATT&CK, Improve detection quality, Hunt threats, Handle incidents, Collect evidence, Document incidents, Support compliance, Support audits, Contribute to automation, Participate in training, Participate in simulations, Participate in exercises, Onboard log sources, Manage log availability", "teamCollaboration" : "Collaborate with IT; Collaborate with network; Collaborate with application teams; Collaborate with MSSP; Collaborate with CSIRT; Collaborate with IT infrastructure", "domainKnowledge" : "Cyber resilience; MITRE ATT&CK; Cloud breaches; Insider threats; Malware; Phishing", "domainList" : [ "cyber-resilience", "mitre-att-ck", "cloud-breaches", "insider-threats", "malware", "phishing" ], "domainSpecificKnowledge" : [ "Cyber resilience", "MITRE ATT&CK", "Cloud breaches", "Insider threats", "Malware", "Phishing" ], "toolProficiency" : [ "Elastic Stack", "SIEM" ], "documentationSkills" : "Incident documentation; Incident reports; Lessons learned; Evidence collection; Compliance documentation; Audit documentation", "continuousLearning" : "Training sessions; Simulations; Tabletop exercises", "innovationCreativity" : "Automation opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Ensure timely response; Maintain cyber resilience; Align with MTTD goals; Align with MTTR goals", "qualificationsBasic" : "Perform deep-dive investigations, Conduct threat hunting, Support incident response reporting, Manage continuous logs availability", "qualificationsPreferred" : "MITRE ATT&CK mapping, Automation opportunities", "rawDescription" : "Role Mission The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution. Accountabilities: - Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts. - Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals. - Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections. - Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud). - Create and maintain incident documentation, reports, and lessons learned. - Support incident response playbook execution during containment and recovery phases. - Collaborate with IT, network, and application teams for incident remediation and root cause analysis. - Provide insights for use case improvements and participate in use case validation and testing. - Escalate confirmed incidents to CSIRT / Assistant Manager - Incident Response for further action. - Participate in post-incident reviews, contributing to process and detection improvements. - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. Requirements - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. #LI-JE1", "summaryDescription" : "Senior Incident Response Specialist, Cyber Security. Skills: Incident Response, Cyber Security, SIEM platform. Monitor security alerts. Investigate security alerts", "createdAt" : "2026-06-14T19:11:17.518", "lastUpdated" : "2026-06-16T02:39:21.304", "ingestTimestamp" : "2026-06-14T19:11:17.518", "mongoId" : "6a2c68fa74d8ee00a0905806", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises", "Incident Response", "Cyber Security", "SIEM platform", "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding", "Cyber resilience", "MITRE ATT&CK", "Malware", "Phishing", "Elastic Stack", "SIEM" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e418f8b1b0376634c36a", "title" : "Security Engineer, Incident Response, CorpSec", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:14:41.009", "fingerprint" : "1d73ed9116d8a3da3a8809fe15ae6abbeb90fed1911a7e130db33978905c1cf9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3079013/apply", "externalId" : "6e9703e8-c44e-4f5b-9f27-1aa702f0786e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Threat hunting, Detection engineering, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, Programming language, Scripting language, Amazon Web Services", "professionalSkills" : [ "Security monitoring", "Response activities" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership", "Curiosity", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Response activities", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Curiosity" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security engineering, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security engineering", "Threat intelligence" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities", "teamCollaboration" : "Global team environment; Security issues", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Threat hunting; Detection engineering; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "threat-hunting", "detection-engineering", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider" ], "toolProficiency" : [ "SOAR", "SIEM platforms" ], "communicationSkills" : "Clear communication; Accurate communication", "continuousLearning" : "Learn about security domains", "problemSolvingSkills" : "Think like attacker; Think like defender", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 3 years systems, network, or application security experience, 3 years experience on Security team, Coordinating security incident responses, Proficiency with one high-level programming or scripting language", "qualificationsPreferred" : "Experience in security operations or incident response, Experience in security automation tooling, Experience in threat intelligence, Familiarity with threat hunting, Familiarity with detection engineering, Familiarity with malware analysis, Familiarity with forensics, Familiarity with SOAR, Familiarity with SIEM platforms, Familiarity with variety of Operating Systems, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, threat hunting, detection engineering, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. Or equivalent industry certification. - 3 years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 3 years experience on a Security team, especially experience coordinating responses to security incidents. Proficiency with one high-level programming or scripting language. Preferred Qualifications: - Experience working in security operations or incident response, security automation tooling, or threat intelligence. - Familiarity with threat hunting, detection engineering, malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS). - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Incident Response, CorpSec at Amazon.com Services LLC. Skills: Incident response, Security engineering, Threat intelligence. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T11:16:05.380", "createdAt" : "2026-06-13T11:16:05.380", "lastUpdated" : "2026-06-15T02:14:41.009", "ingestTimestamp" : "2026-06-13T11:16:05.380", "mongoId" : "68c2e418f8b1b0376634c36a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3079013/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Leadership", "Curiosity", "Critical thinking", "Incident response", "Security engineering", "Threat intelligence", "Operating system security", "Network security", "Cryptography", "Software security", "Cloud provider", "SOAR", "SIEM platforms" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "69fa63dd4c40e2acd1677550", "title" : "Security Engineering Manager, AWS Foundational & Hardware Security", "company" : "Amazon.com Services LLC", "industry" : "Software Development, Systems Security Engineering, amazon security", "salary" : { "min" : 100000.0, "max" : 236900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "certifications" : [ "CISSP", "CCSP", "AWS Security Specialty" ], "timestamp" : "2026-06-15T21:22:35.273", "fingerprint" : "57d02be7277c41ba24e997e416629383701d5d1e1d0e31910c3d8e86eba5b5c2", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10411738/apply", "externalId" : "85459f7b-1ad9-4065-a2b5-7d66e575e125", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Security engineering, Hardware security, AWS, Cloud security, Cryptography, Threat modeling, Security compliance", "professionalSkills" : [ "Team management", "Strategic planning", "Risk assessment", "Cross-functional collaboration" ], "hardSkillsList" : [ "Security architecture", "Vulnerability management", "Incident response" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security Engineering Management, Hardware Security, AWS Security", "majorSkillsList" : [ "Security Engineering Management", "Hardware Security", "AWS Security" ], "coreResponsibilities" : "Lead and manage a team of security engineers, Develop and implement security strategies, Oversee security architecture for AWS foundational services, Ensure hardware security best practices, Conduct security reviews and risk assessments, Collaborate with engineering teams to integrate security, Stay current with emerging security threats, Mentor and develop team members", "teamCollaboration" : "Cross-functional teams; Engineering teams; Product teams", "projectManagementSkills" : [ "Agile methodologies", "Project planning" ], "domainKnowledge" : "AWS foundational security; Hardware security; Cloud security architecture; Security compliance frameworks; Cryptography principles", "domainList" : [ "aws-foundational-security", "hardware-security", "cloud-security-architecture", "security-compliance-frameworks", "cryptography-principles" ], "domainSpecificKnowledge" : [ "AWS foundational security", "Hardware security", "Cloud security architecture", "Security compliance frameworks", "Cryptography principles" ], "toolProficiency" : [ "Security tools", "Monitoring tools", "Analysis tools" ], "communicationSkills" : "Technical presentations; Stakeholder communication", "documentationSkills" : "Security documentation; Architecture diagrams", "continuousLearning" : "Security conferences; Training programs", "innovationCreativity" : "Security innovation; Proactive security solutions", "problemSolvingSkills" : "Root cause analysis; Security incident analysis; Complex problem solving", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Enhance AWS foundational security posture; Strengthen hardware security controls; Reduce security risks; Ensure compliance with security standards", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in security engineering, 3+ years of experience managing security teams, Experience with hardware security, Experience with AWS foundational security", "qualificationsPreferred" : "Master's degree or PhD, Experience with cloud security architecture, Experience with security compliance frameworks, Experience with threat modeling, Experience with cryptography", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security is seeking an experienced and technical Security Engineering Manager to lead the Foundational & Hardware Security team. In this role, you will own the hardware security practice within AWS, driving security strategy across custom silicon design, firmware, and platform technologies. You will lead a team of world-class security engineers, engage deeply with AWS hardware engineering and platform teams to shape their security roadmaps, and ensure that AWS hardware platforms — from custom chipsets to edge and hybrid devices — are built and operated to the highest security standards. This is a high-impact leadership role at the intersection of hardware engineering and security, with direct influence on the security posture of AWS's global cloud infrastructure, custom silicon programs, and edge computing portfolio. Key job responsibilities * Lead, mentor, and grow a team of security engineers, fostering a culture of technical excellence and ownership * Engage early with AWS hardware engineering teams — including silicon design, firmware, and platform engineering — to influence their security roadmaps, embed security requirements from the earliest stages of product design, and ensure security is a first-class consideration from chip architecture through deployment * Define and drive the multi-year hardware security strategy for AWS, covering: * Custom silicon security: chip-level security architecture for AWS-designed processors such as Graviton, Trainium, and Inferentia — including secure boot, hardware root of trust, memory protection, and inter-chip communication security (encryption, side-channel resistance, power analysis attack mitigations) * Firmware security: secure firmware development lifecycle, firmware integrity verification, anti-rollback protections, and vulnerability management across AWS hardware platforms * TPM and cryptographic hardware: TPM implementation, hardware security module (HSM) integration, and cryptographic key management at the hardware layer * Edge and hybrid device security: end-to-end hardware security for AWS edge and hybrid devices such as AWS Snowball and AWS Outposts — including physical tamper resistance, secure provisioning, and field security operations * IoT and device security: hardware security architecture for connected and embedded devices, including secure element integration, device attestation, over-the-air (OTA) update security, and hardware-enforced isolation * Platform and hypervisor security: security verification of platform technologies including hypervisors, virtualization layers, and hardware-software interfaces — ensuring hardware security controls are correctly implemented and enforced at the platform level * Verify security controls implemented across hardware, firmware, and platform technologies — conducting rigorous security assessments, threat modeling, and penetration testing to validate that security requirements are met end-to-end * Drive all hardware-related security issues to successful resolution, ensuring prompt response to emerging risks across silicon, firmware, and platform layers * Communicate major security risks and program status to CISO and AWS Security leadership * Develop and maintain team training, onboarding, and career development programs * Represent the AWS Security team as an ambassador with external partners, silicon vendors, and industry standards bodies * Establish scalable mechanisms for hardware and firmware security review, tooling, and detection across AWS's global hardware fleet About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree in Computer Science, Information Security, or a related field - 4+ years of deep domain expertise in hardware/firmware design and/or virtualization technologies - 3+ years of experience managing and developing high-performing security engineering teams - Technical understanding of: Chip-level security architecture, secure boot, and hardware root of trust * Firmware security — secure development practices, integrity verification, and vulnerability management * IoT and device hardware security concepts — device attestation, secure provisioning, hardware-enforced isolation, and OTA security * Platform and hypervisor security — understanding of how hardware security controls interact with virtualization and platform software layers - Demonstrated ability to engage with and influence engineering teams on security strategy and roadmap Preferred Qualifications: - Master's degree or PhD in Computer Science, Electrical Engineering, or a related field - Experience securing custom silicon programs (e.g., ARM-based SoCs, custom ASICs) in large-scale cloud or data center environments - Familiarity with side-channel attacks, fault injection, and physical security testing methodologies - Experience with edge and hybrid device security — including tamper-resistant hardware design, secure field provisioning, and remote attestation for devices like AWS Snowball or Outposts - Deep understanding of embedded systems security, RTOS security, and low-level firmware attack surfaces - Experience verifying security controls across hypervisors and virtualization platforms (e.g., Nitro, KVM, Xen) - Track record of influencing hardware and firmware security roadmaps across large engineering organizations - Experience working with external security researchers, silicon vendors, ODMs, and regulatory bodies - Strong written and verbal communication skills, with the ability to present complex hardware security topics to senior leadership Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Austin - 175,100.00 - 236,900.00 USD annually", "summaryDescription" : "Security Engineering Manager, AWS Foundational & Hardware Security at Amazon.com Services LLC. Skills: Security Engineering Management, Hardware Security, AWS Security. Lead and manage a team of security engineers. Develop and implement security strategies", "postedDate" : "2026-06-14T19:35:45.909", "createdAt" : "2026-06-14T19:35:45.909", "lastUpdated" : "2026-06-15T21:22:35.273", "ingestTimestamp" : "2026-06-14T19:35:45.909", "mongoId" : "69fa63dd4c40e2acd1677550", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10411738/apply", "salaryAnnualMin" : 100000, "salaryAnnualMax" : 236900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security architecture", "Vulnerability management", "Incident response", "Leadership", "Mentoring", "Security Engineering Management", "Hardware Security", "AWS Security", "Team management", "Strategic planning", "Risk assessment", "Cross-functional collaboration", "Agile methodologies", "Project planning", "AWS foundational security", "Hardware security", "Cloud security architecture", "Security compliance frameworks", "Cryptography principles", "CISSP", "CCSP", "AWS Security Specialty", "Security tools", "Monitoring tools", "Analysis tools" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30766ff292fd229c019a39", "title" : "Security Engineering Manager (Cloud Security)", "company" : "Nubank", "industry" : "FinTech", "salary" : { "min" : 250000.0, "max" : 400000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager level Security Engineering role in FinTech, adjusted for Belo Horizonte, Brazil, and company size." }, "location" : "Belo Horizonte", "locations" : [ "Belo Horizonte", "Campinas", "Rio de Janeiro", "São Paulo" ], "timestamp" : "2026-06-16T12:04:20.122", "fingerprint" : "36c982f5d44ccf85a52e1c2e1524bb8ada0bb2ac04d4713ea94af1f3033def16", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nubank/jobs/8007428", "externalId" : "8007428", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Belo Horizonte", "country" : "Brazil", "continent" : "sa", "source" : "llm", "workMode" : "hybrid", "geo" : "-19.9227318,-43.9450948" } ], "locationText" : "Belo Horizonte, Brazil", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Golang, Clojure, Python, Shell scripting, IaC, Terraform, Pulumi, CloudFormation, AWS, GCP, Kubernetes, Kafka, CSPM/CNAPP platforms, AI/ML infrastructure", "professionalSkills" : [ "Technical leadership", "Strategy execution", "Architecture design", "Root cause analysis", "Roadmap planning", "Financial management", "Risk management" ], "hardSkillsList" : [ "Cloud security controls", "Configuration baselines", "Posture detection", "Preventive controls", "Remediation pipelines", "AI enablement" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Configuration baselines", "level" : "intermediate" }, { "name" : "Posture detection", "level" : "intermediate" }, { "name" : "Preventive controls", "level" : "intermediate" }, { "name" : "Remediation pipelines", "level" : "intermediate" }, { "name" : "AI enablement", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cloud Security, Engineering Management, AWS, IaC", "majorSkillsList" : [ "Cloud Security", "Engineering Management", "AWS", "IaC" ], "coreResponsibilities" : "Lead the squad, Set clear expectations, Give frequent feedback, Run career conversations, Hire and onboard talent, Plan team composition and skills, Drive technical decisions, Enable technical decisions on architecture, Be accountable for technical health, Set team's quality, Oversee root cause analysis, Lead phased rollouts, Sponsor architectural decisions, Communicate trade-offs to stakeholders, Translate strategy into execution, Cascade strategy into roadmap, Balance regulatory commitments, Manage initiatives, Own squad's contribution to OKRs, Operate with accountability, Hold accountability for financials, Operate in compliance with policies, Lead and mentor others, Contribute to hiring panels", "teamCollaboration" : "Infrastructure peers; Infrastructure teams; Product engineering; Compliance; GRC; Procurement; Foundation Security; ITSec", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Multi-cloud patterns; Cloud configuration risk; International banking regulators; AI safety; PCI; ISO 27001; Banking regulators; Runtime security; Event-streaming platforms; Data pipelines; AI/ML infrastructure", "domainList" : [ "multi-cloud-patterns", "cloud-configuration-risk", "international-banking-regulators", "ai-safety", "pci", "iso-27001", "banking-regulators", "runtime-security", "event-streaming-platforms", "data-pipelines", "ai-ml-infrastructure" ], "domainSpecificKnowledge" : [ "Multi-cloud patterns", "Cloud configuration risk", "International banking regulators", "AI safety", "PCI", "ISO 27001", "Banking regulators", "Runtime security", "Event-streaming platforms", "Data pipelines", "AI/ML infrastructure" ], "toolProficiency" : [ "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "CSPM/CNAPP platforms", "Jira", "LookerigQuery", "Cursor", "Claude Code", "GitHub Copilot" ], "communicationSkills" : "Written communication; Spoken communication", "continuousLearning" : "Nucleo learning platform", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Reduce blast radius", "qualificationsBasic" : "Engineering Manager experience, Hands-on software engineering background, Working knowledge of AWS at scale, Comfort designing and governing preventive controls, Track record of hiring, onboarding, and developing, Experience running performance and career conversations, Ability to make complex trade-offs clear", "qualificationsPreferred" : "Familiarity with GCP, Prior experience building and shipping software products, Prior exposure to CSPM/CNAPP platforms, Experience supporting regulatory or compliance workstreams, Familiarity with Kubernetes runtime security, Familiarity with event-streaming platforms, Familiarity with large-scale data pipelines, Experience embedding security into AI/ML infrastructure, Hands-on use of AI coding assistants", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Us Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the Team Cloud Security defines and operates the cloud security controls that underpin Nubank's growth globally and across multiple cloud providers. The team owns the preventive guardrails, configuration baselines, and posture-detection mechanisms that allow Nubank to launch in new markets, sustain regulatory commitments with international banking regulators, and adopt AI safely at the cloud layer. About the Role We are looking for an Engineering Manager II to lead a highly senior team of software engineers, translate Foundation Security's strategy into structured execution, and provide the close technical leadership of this squad's seniority and scope demand. This is a dedicated leadership seat — your full focus is one squad and its outcomes. What You’ll Be Responsible For Lead the squad Set clear expectations, give frequent feedback, and run career conversations with senior ICs. Hire and onboard talent, partnering with P plan the team's composition and skills against Nubank's objectives. Drive technical decisions and engineering excellence Lead and enable technical decisions on the squad's architecture, with a strong understanding of multi-cloud patterns and trade-offs (AWS, GCP, IaC, Kubernetes, event-driven controls). Be accountable for the technical health of the squad's products: code quality, test coverage, observability, and technical-debt management. Set the team's quality bar; oversee root cause analysis for complex incidents and lead phased rollouts that reduce blast radius. Sponsor architectural decisions for squad-level projects and communicate trade-offs to non-technical stakeholders. Translate strategy into execution Cascade Foundation Security and ITSec strategy into the squad's roadmap, balancing regulatory commitments across international markets, AI enablement, and ongoing reduction of cloud configuration risk. Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement). Own the squad's contribution to OKRs, monthly business reviews, and the Area business board. Operate with accountability Hold accountability for the squad's financials within ITSec's guidelines (tooling renewals, headcount, contracts). Operate in compliance with corporate policies and risk-management processes. Lead and mentor others within the squad; contribute to hiring panels across Foundation Security. We Are Looking for a Person Who Has Must-have Engineering Manager experience leading a software/security squad, or strong tech-lead/staff-level background with clear intent and readiness to move into people management. Solid hands-on software engineering background — comfortable reading and reviewing code in at least one of Golang, Clojure, or Python, writing Shell/Python scripts for automation, and reviewing IaC (Terraform, Pulumi). Working knowledge of AWS at scale (multi-account, Organizations, IAM, networking, Security Hub, Config). Familiarity with GCP is a strong plus. Comfort designing and governing preventive controls (SCPs, Organization Policies, admission controllers) and remediation pipelines. Track record of hiring, onboarding, and developing engineers; experience (or strong appetite) for running performance and career conversations. Strong written and spoken communication in English; ability to make complex trade-offs clear to non-technical stakeholders. Nice-to-have Prior experience building and shipping software products (not only operating off-the-shelf security tools) — internal platforms, services, CLIs, integrations, APIs. Prior exposure to CSPM/CNAPP platforms (any major vendor). Experience supporting regulatory or compliance workstreams (PCI, ISO 27001, banking regulators). Familiarity with Kubernetes runtime security, event-streaming platforms, and large-scale data pipelines. Experience embedding security into AI/ML infrastructure. Hands-on use of AI coding assistants (Cursor, Claude Code, GitHub Copilot, or similar) to accelerate engineering work and team productivity. Tech stack you'll be exposed to AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, Golang, Clojure, Python, shell scripting, CSPM/CNAPP platforms, internal data pipelines, Looker/BigQuery, Jira. AI coding assistants are part of our daily engineering workflow. What we offer A dedicated leadership seat in a squad with very high seniority and very high strategic relevance. Direct line of sight to Nubank's regulatory and international expansion programs. A squad that builds its own products in-house — you'll lead software engineers shipping real software, not coordinating ticket queues. A peer group of EMs across Foundation Security (Runtime, Infrastructure, Data) and a senior management layer that operates with full financial and strategic accountability. Exposure to multi-country, multi-cloud problems at the scale of Latin America's largest digital bank. Our Benefits Chance of earning equity at Nubank Food/ Meal Card (Vale-Refeição and/or Vale Alimentação) Public Transportation Commuting Benefit (Vale-Transporte) NuCare – Psychological, Financial and Legal Assistance Program Life Insurance Medical Plan Dental Plan NuLanguage – Language Course Program Nucleo - Our learning platform of courses Extended Parental Leave Daycare Allowance Parental Consultancy Work-from-home Allowance Gym Partnerships 30 days of paid vacation Work Model for this Role Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/", "summaryDescription" : "Security Engineering Manager (Cloud Security) at Nubank. Skills: Cloud Security, Engineering Management, AWS, IaC. Lead the squad. Set clear expectations", "postedDate" : "2026-06-16T01:18:02.139", "createdAt" : "2026-06-16T01:18:02.139", "lastUpdated" : "2026-06-16T12:04:20.122", "ingestTimestamp" : "2026-06-16T01:18:02.139", "mongoId" : "6a30766ff292fd229c019a39", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud security controls", "Configuration baselines", "Posture detection", "Preventive controls", "Remediation pipelines", "AI enablement", "Leadership", "Mentoring", "Cloud Security", "Engineering Management", "AWS", "IaC", "Technical leadership", "Strategy execution", "Architecture design", "Root cause analysis", "Roadmap planning", "Financial management", "Risk management", "Multi-cloud patterns", "Cloud configuration risk", "International banking regulators", "AI safety", "PCI", "ISO 27001", "Banking regulators", "Runtime security", "Event-streaming platforms", "Data pipelines", "AI/ML infrastructure", "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "CSPM/CNAPP platforms", "Jira", "LookerigQuery", "Cursor", "Claude Code", "GitHub Copilot" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.97 }, { "id" : "6a307964f292fd229c031f80", "title" : "Security Engineering Manager (Cloud Security)", "company" : "Nu", "industry" : "Engineer", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager-level Security Engineering Manager in FinTech in São Paulo, Brazil, adjusted for company size and industry." }, "location" : "São Paulo", "locations" : [ "São Paulo" ], "timestamp" : "2026-06-16T11:54:09.967", "fingerprint" : "94ee3a1086fbeb3b5e19be92d123c62122fa0b3e537c17b1bc08be929b5d0378", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nubank/2a53d60e-88cd-4ef7-a217-270b31bb6f3a/application", "externalId" : "2a53d60e-88cd-4ef7-a217-270b31bb6f3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "São Paulo", "country" : "Brazil", "continent" : "sa", "source" : "llm", "workMode" : "hybrid", "geo" : "-23.5506507,-46.6333824" } ], "locationText" : "São Paulo, Brazil", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Golang, Clojure, Python, Shell scripting, AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, CSPM, CNAPP", "professionalSkills" : [ "Technical leadership", "People management", "Career conversations", "Hiring talent", "Conflict mediation", "Performance management", "Team engagement", "Technical decisions", "Engineering excellence", "Code quality", "Test coverage", "Observability", "Technical-debt management", "Root cause analysis", "Phased rollouts", "Architectural decisions", "Stakeholder communication", "Strategy translation", "Roadmap management", "Risk management", "Financial accountability", "Process compliance" ], "hardSkillsList" : [ "Multi-cloud patterns", "Event-driven controls" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Multi-cloud patterns", "level" : "intermediate" }, { "name" : "Event-driven controls", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cloud Security, Engineering Management, Software Engineering, IaC", "majorSkillsList" : [ "Cloud Security", "Engineering Management", "Software Engineering", "IaC" ], "coreResponsibilities" : "Lead the squad, Set clear expectations, Give frequent feedback, Run career conversations, Hire and onboard talent, Partner with P&C, Mediate conflicts, Address low performance, Create safe space, Manage team engagement, Plan team composition, Drive technical decisions, Enable technical decisions, Understand multi-cloud patterns, Understand trade-offs, Be accountable for technical health, Manage code quality, Manage test coverage, Manage observability, Manage technical-debt, Set team quality standards, Oversee root cause analysis, Lead phased rollouts, Sponsor architectural decisions, Communicate trade-offs, Translate strategy into execution, Cascade strategy into roadmap, Balance regulatory commitments, Enable AI safely, Reduce cloud configuration risk, Manage initiatives, Own squad contribution to OKRs, Own monthly business reviews, Own Area business board, Hold accountability for financials, Operate in compliance, Lead others, Mentor others, Contribute to hiring panels", "teamCollaboration" : "Cross-functional teams; Infrastructure peers; Infrastructure teams; Product engineering; Compliance; GRC; Procurement", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cloud security; Multi-cloud patterns; AWS; GCP; IaC; Kubernetes; Event-driven controls; International banking regulators; AI enablement; Cloud configuration risk", "domainList" : [ "cloud-security", "multi-cloud-patterns", "aws", "gcp", "iac", "kubernetes", "event-driven-controls", "international-banking-regulators", "ai-enablement", "cloud-configuration-risk" ], "domainSpecificKnowledge" : [ "Cloud security", "Multi-cloud patterns", "AWS", "GCP", "IaC", "Kubernetes", "Event-driven controls", "International banking regulators", "AI enablement", "Cloud configuration risk" ], "toolProficiency" : [ "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "Jira", "GitHub Copilot" ], "communicationSkills" : "Stakeholder communication", "continuousLearning" : "Learning platform", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "Engineering Manager experience, Tech-lead/staff-level background, Hands-on software engineering background, Comfortable reading code, Comfortable reviewing code, Writing Shell/Python scripts, Reviewing IaC, Working knowledge of AWS at scale", "qualificationsPreferred" : "Experience with AI coding assistants", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "ABOUT NU Nu is one of the largest digital financial services platforms in the world, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our institutional page: https://www.nu.com/2026-en ABOUT US Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the Team Cloud Security defines and operates the cloud security controls that underpin Nubank's growth globally and across multiple cloud providers. The team owns the preventive guardrails, configuration baselines, and posture-detection mechanisms that allow Nubank to launch in new markets, sustain regulatory commitments with international banking regulators, and adopt AI safely at the cloud layer. ABOUT THE ROLE We are looking for an Engineering Manager II to lead a highly senior team of software engineers, translate Foundation Security's strategy into structured execution, and provide the close technical leadership of this squad's seniority and scope demand. This is a dedicated leadership seat — your full focus is one squad and its outcomes. WHAT YOU’LL BE RESPONSIBLE FOR Lead the squad - Set clear expectations, give frequent feedback, and run career conversations with senior ICs. - Hire and onboard talent, partnering with P&C and the Foundation Security hiring pipeline. - Mediate conflicts, address low performance promptly and impartially, and create a safe space for difficult conversations. - Manage team engagement with data; plan the team's composition and skills against Nubank's objectives. Drive technical decisions and engineering excellence - Lead and enable technical decisions on the squad's architecture, with a strong understanding of multi-cloud patterns and trade-offs (AWS, GCP, IaC, Kubernetes, event-driven controls). - Be accountable for the technical health of the squad's products: code quality, test coverage, observability, and technical-debt management. - Set the team's quality bar; oversee root cause analysis for complex incidents and lead phased rollouts that reduce blast radius. - Sponsor architectural decisions for squad-level projects and communicate trade-offs to non-technical stakeholders. Translate strategy into execution - Cascade Foundation Security and ITSec strategy into the squad's roadmap, balancing regulatory commitments across international markets, AI enablement, and ongoing reduction of cloud configuration risk. - Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement). - Own the squad's contribution to OKRs, monthly business reviews, and the Area business board. Operate with accountability - Hold accountability for the squad's financials within ITSec's guidelines (tooling renewals, headcount, contracts). - Operate in compliance with corporate policies and risk-management processes. - Lead and mentor others within the squad; contribute to hiring panels across Foundation Security. WE ARE LOOKING FOR A PERSON WHO HAS Must-have - Engineering Manager experience leading a software/security squad, or strong tech-lead/staff-level background with clear intent and readiness to move into people management. - Solid hands-on software engineering background — comfortable reading and reviewing code in at least one of Golang, Clojure, or Python, writing Shell/Python scripts for automation, and reviewing IaC (Terraform, Pulumi). - Working knowledge of AWS at scale (multi-account, Organizations, IAM, networking, Security Hub, Config). Familiarity with GCP is a strong plus. - Comfort designing and governing preventive controls (SCPs, Organization Policies, admission controllers) and remediation pipelines. - Track record of hiring, onboarding, and developing engineers; experience (or strong appetite) for running performance and career conversations. - Strong written and spoken communication in English; ability to make complex trade-offs clear to non-technical stakeholders. Nice-to-have - Prior experience building and shipping software products (not only operating off-the-shelf security tools) — internal platforms, services, CLIs, integrations, APIs. - Prior exposure to CSPM/CNAPP platforms (any major vendor). - Experience supporting regulatory or compliance workstreams (PCI, ISO 27001, banking regulators). - Familiarity with Kubernetes runtime security, event-streaming platforms, and large-scale data pipelines. - Experience embedding security into AI/ML infrastructure. - Hands-on use of AI coding assistants (Cursor, Claude Code, GitHub Copilot, or similar) to accelerate engineering work and team productivity. Tech stack you'll be exposed to - AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, Golang, Clojure, Python, shell scripting, CSPM/CNAPP platforms, internal data pipelines, Looker/BigQuery, Jira. AI coding assistants are part of our daily engineering workflow. What we offer - A dedicated leadership seat in a squad with very high seniority and very high strategic relevance. - Direct line of sight to Nubank's regulatory and international expansion programs. - A squad that builds its own products in-house — you'll lead software engineers shipping real software, not coordinating ticket queues. - A peer group of EMs across Foundation Security (Runtime, Infrastructure, Data) and a senior management layer that operates with full financial and strategic accountability. - Exposure to multi-country, multi-cloud problems at the scale of Latin America's largest digital bank. OUR BENEFITS - Chance of earning equity at Nubank - Food/ Meal Card (Vale-Refeição and/or Vale Alimentação) - Public Transportation Commuting Benefit (Vale-Transporte) - NuCare – Psychological, Financial and Legal Assistance Program - Life Insurance - Medical Plan - Dental Plan - NuLanguage – Language Course Program - Nucleo - Our learning platform of courses - Extended Parental Leave - Daycare Allowance - Parental Consultancy - Work-from-home Allowance - Gym Partnerships - 30 days of paid vacation WORK MODEL FOR THIS ROLE Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ By submitting an application, I acknowledge that I have read and understand the Nubank Candidate Privacy Notice. Nubank Candidate Privacy Notice (English https://building.nubank.com/privacy-notice-for-candidates// Portuguese https://building.nubank.com/pt-br/aviso-de-privacidade-para-candidatos/ / Spanish). https://nu.com.mx/aviso-de-privacidad-candidatos/", "summaryDescription" : "Security Engineering Manager (Cloud Security) at Nu. Skills: Cloud Security, Engineering Management, Software Engineering, IaC. Lead the squad. Set clear expectations", "createdAt" : "2026-06-16T01:59:31.753", "lastUpdated" : "2026-06-16T11:54:09.967", "ingestTimestamp" : "2026-06-16T01:59:31.753", "mongoId" : "6a307964f292fd229c031f80", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Multi-cloud patterns", "Event-driven controls", "Leadership", "Cloud Security", "Engineering Management", "Software Engineering", "IaC", "Technical leadership", "People management", "Career conversations", "Hiring talent", "Conflict mediation", "Performance management", "Team engagement", "Technical decisions", "Engineering excellence", "Code quality", "Test coverage", "Observability", "Technical-debt management", "Root cause analysis", "Phased rollouts", "Architectural decisions", "Stakeholder communication", "Strategy translation", "Roadmap management", "Risk management", "Financial accountability", "Process compliance", "Roadmap planning", "Cloud security", "AWS", "GCP", "Kubernetes", "International banking regulators", "AI enablement", "Cloud configuration risk", "Terraform", "Pulumi", "CloudFormation", "Kafka", "Jira", "GitHub Copilot" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "68b706967fc9a711f0f6f0fc", "title" : "Sr. Security Engineer, AWS Cloud Security Response", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:44:36.234", "fingerprint" : "8a7a3fd9386f46352c27b51d967635462826361466b369c04fe4a00251d6e89c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3051891/apply", "externalId" : "2298684c-4600-4216-9042-5f7f5e39f8c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Bash scripting, PowerShell scripting, Python scripting, Linux, Unix", "professionalSkills" : [ "Risk assessment", "Information security", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "hardSkillsList" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Coding", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Operating system security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Virtualization technologies", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Cloud Security, Incident Response, Security Engineering, AWS", "majorSkillsList" : [ "Cloud Security", "Incident Response", "Security Engineering", "AWS" ], "coreResponsibilities" : "Manage security and availability of AWS Cloud services, Operate on the ‘AWS’ side of the Shared, Protect customers, Work tactically with internal and external stakeholders, Solve security challenges at massive scale, Think strategically to develop and implement changes, Drive automation, Drive scalability, Drive continuous progress, Assess technical vs. business risks, Drive internal engineering teams to take the right, Mitigate risks, Triage/assess security issues, Engage with internal service teams, Ensure prompt remediation of issues, Escalate internally as necessary, Ensure the right level of urgency and engagement, Participate in efforts to promote security throughout the, Build good working relationships within the team, Build good working relationships with others across Amazon, Develop pragmatic solutions that achieve business requirements, Keep an acceptable level of risk, Help with recruiting activities, Help with administrative work, Mentoring of junior staff, Proactive knowledge sharing within the team, Proactive knowledge sharing across the company, Fulfill regular on-call responsibilities, Supply oversight of in-flight security issues, Triage new incoming issues, Determine the level of risk, Prioritize remediation, Communicate the state of these issues to various, Escalate issues to senior AWS leadership, Explore building and improving our tooling, Share tooling benefits with all our engineers globally, Take handover from the previous site, Be delegated ownership of various security issues, Learn on the go, Engage various stakeholders, Triage new issues, Determine impact level, Work towards resolving them, Document all issues you are tracking", "teamCollaboration" : "Internal stakeholders; External stakeholders; Internal service teams; Senior leadership; Partner teams; Other AWS teams", "projectManagementSkills" : [ "Prioritize multiple tasks", "Manage projects" ], "domainKnowledge" : "AWS Cloud Security; Shared Responsibility Model; Cloud computing; Network security; Operating system security; Cryptography; Software security; Security operations; Incident response; Security intelligence; Web protocols; Linux architecture; Unix architecture", "domainList" : [ "aws-cloud-security", "shared-responsibility-model", "cloud-computing", "network-security", "operating-system-security", "cryptography", "software-security", "security-operations", "incident-response", "security-intelligence", "web-protocols", "linux-architecture", "unix-architecture" ], "domainSpecificKnowledge" : [ "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Web protocols", "Linux architecture", "Unix architecture" ], "toolProficiency" : [ "AWS", "Linux tools", "Unix tools" ], "communicationSkills" : "Oral communication; Written communication; Communicate to leadership", "continuousLearning" : "Learn on the go", "innovationCreativity" : "Develop pragmatic solutions; Explore building and improving tooling", "problemSolvingSkills" : "Troubleshooting; Critical thinking; Creative thinking; Root cause analysis", "specialRequirements" : "On-call responsibilities", "outcomesObjectives" : "Ensure security of the Cloud; Mitigate risks; Drive automation; Drive scalability; Drive continuous progress; Ensure prompt remediation of issues; Achieve business requirements; Keep acceptable level of risk; Ensure customers are put first", "qualificationsBasic" : "BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience, 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security", "qualificationsPreferred" : "2+ years of scripting/coding experience in any language, Previous experience in Python scripting would be ideal, Understanding and experience with implementation of best practices across multiple security disciplines/domains, Strong, proven knowledge of virtualization technologies (AWS preferred), Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, employ critical and creative thinking, Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills, Ability to prioritize multiple tasks and projects in a dynamic environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Cloud Security Response team manages the security and availability of AWS Cloud services. We operate on the ‘AWS’ side of the Shared Responsibility Model to ensure “Security of the Cloud” and to protect our customers. This role requires engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale, and to think strategically to develop and implement changes to drive automation, scalability and continuous progress for the organization. We’re looking for talented software and systems professionals with a passion for security who thrive in high energy environments to help us continue to raise the security bar for cloud computing. Successful candidates should: - be able to assess technical vs. business risks and consistently drive internal engineering teams to take the right actions in the appropriate time frames to mitigate risks. - have a good mix of broad and deep technical knowledge and a demonstrated background in information security. - be technically proficient in the fields of network and operating system security, cryptography, software security, security operations, incident response, and emergent security intelligence. - possess a combination of troubleshooting, technical, and communication skills, as well as the ability to manage a mix of disparate tasks which may include small-project and software development work. - be comfortable challenging and escalating to senior leadership to always ensure the best outcome for customers. An ideal candidate should be able to conduct most of the following: - Triage/assess security issues and engage with internal service teams to ensure prompt remediation of issues, escalating internally as necessary to ensure the right level of urgency and engagement. - Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon. - Demonstrate high ability and tolerance for frequent context switching and interruptions while staying productive and effective. - Develop pragmatic solutions that achieve business requirements while keeping an acceptable level of risk. - Help with recruiting activities and administrative work. - Mentoring of junior staff and proactive knowledge sharing within the team and across the company. - Fulfill regular on-call responsibilities. #SecOps Key job responsibilities - Supply oversight of in-flight security issues. - Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team. - Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including AWS’ Chief Information Security Officer). - Escalate issues to senior AWS leadership if you feel your issues are not being treated at the correct pace due to their impact to ensure that we are putting customers first. - Explore building and improving our tooling to make your own life easier, and at the same time, sharing that benefit with all our engineers globally. A day in the life In the morning you will take handover from the previous site and be delegated ownership of various security issues presently in-flight. The issues could relate to any of our many products, so you will often need to learn on the go. You will engage various stakeholders, such as the internal service team who actually needs to fix the issue, along with AWS Security Leadership, Legal, and the leadership from the impacted service team. As the day progresses, new issues will be automatically assigned to you based on your workload and you will be responsible for triaging them, determining their level of impact, and work towards resolving them at the appropriate pace. We staff a \"follow the sun\" on-call model from multiple geographic locations. At the end of the day, you will document all the issues you are tracking so they can be taken over by the next shift. About the team Cloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations. We work with other AWS teams, to ensure security issues are resolved with the right level of urgency, whilst ensuring that our stakeholders are kept into the loop. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience. - 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security. Preferred Qualifications: - 2+ years of scripting/coding experience in any language (including Bash/PowerShell scripting). Previous experience in Python scripting would be ideal. - Understanding and experience with implementation of best practices across multiple security disciplines/domains. - Strong, proven knowledge of virtualization technologies (AWS preferred), web protocols, common attacks, and Linux/Unix tools and architecture. - Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, and employ critical and creative thinking. - Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills. - Ability to prioritize multiple tasks and projects in a dynamic environment. - Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Sr. Security Engineer, AWS Cloud Security Response at Amazon.com Services LLC. Skills: Cloud Security, Incident Response, Security Engineering, AWS. Manage security and availability of AWS Cloud services. Operate on the ‘AWS’ side of the Shared", "postedDate" : "2026-06-13T05:32:27.074", "createdAt" : "2026-06-13T05:32:27.074", "lastUpdated" : "2026-06-15T02:44:36.234", "ingestTimestamp" : "2026-06-13T05:32:27.074", "mongoId" : "68b706967fc9a711f0f6f0fc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3051891/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies", "Leadership", "Mentoring", "Critical thinking", "Cloud Security", "Incident Response", "Security Engineering", "AWS", "Risk assessment", "Information security", "Prioritize multiple tasks", "Manage projects", "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Web protocols", "Linux architecture", "Unix architecture", "Linux tools", "Unix tools" ], "skillCount" : 31, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "68c2e423f8b1b0376634c56d", "title" : "Senior Incident Response Engineer, Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hawthorne, California, USA", "locations" : [ "Hawthorne, California, USA" ], "certifications" : [ "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA" ], "timestamp" : "2026-06-15T08:13:32.312", "fingerprint" : "3317fe4da3a6f579d3a5ccdc8430939e8a2a28d3935ec2384cf4f9b32c5db032", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072356/apply", "externalId" : "2d1861cb-aa75-46c6-9067-b6a683645372", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hawthorne", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9128272,-118.3426122" } ], "locationText" : "Hawthorne, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, WAF, EDR/XDR, Python, PowerShell, Bash, Splunk, SOAR, SQL", "professionalSkills" : [ "Incident response", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis" ], "hardSkillsList" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries" ], "softSkillsList" : [ "Judgment under pressure", "Calmness" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network telemetry", "level" : "intermediate" }, { "name" : "Attacker TTPs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "SQL queries", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Judgment under pressure" }, { "name" : "Calmness" } ], "majorSkills" : "Incident response, Security engineering, Detection engineering", "majorSkillsList" : [ "Incident response", "Security engineering", "Detection engineering" ], "coreResponsibilities" : "Investigate security incidents, Respond to security incidents, Drive rapid response, Drive effective response, Act as incident responder, Act as incident commander, Coordinate technical response, Keep stakeholders informed, Conduct post-mortem analysis, Identify root causes, Identify security improvement opportunities, Consult with builder teams, Ensure security designed into products, Collaborate with stakeholders, Execute incident response, Develop detections, Maintain detections, Respond to detections, Combat fraud, Combat abuse, Develop prevention capabilities, Develop detection capabilities, Develop response capabilities, Increase capability through automation, Increase efficiency through automation, Increase signal quality using AI/ML, Assist in runbook development, Assist in playbook tuning, Drive process improvements, Coordinate response efforts, Share learnings, Maintain WAF products, Support WAF products, Protect services from abuse, Drive WAF adoption, Evaluate WAF rules, Tune WAF rules, Develop SQL queries, Analyze log data, Extract information from logs, Extract information from databases, Extract information from services, Spearhead incident response, Drive decision-making, Conduct impact assessments, Implement containment strategies, Develop durable solutions, Proactively hunt threats, Create new detection mechanisms, Consult on security for new product designs, Analyze data, Identify hidden vulnerabilities", "teamCollaboration" : "Cross-functional teams; Global Amazon Security team; Other Incident Response teams", "projectManagementSkills" : [ "Runbook development", "Playbook tuning" ], "domainKnowledge" : "Devices and Services security; IoT platforms; Customer safety; Customer privacy; Fraud and abuse; Distributed systems; Cloud-native architectures; Service-oriented environments; IoT device security; Embedded systems", "domainList" : [ "devices-and-services-security", "iot-platforms", "customer-safety", "customer-privacy", "fraud-and-abuse", "distributed-systems", "cloud-native-architectures", "service-oriented-environments", "iot-device-security", "embedded-systems" ], "domainSpecificKnowledge" : [ "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems" ], "toolProficiency" : [ "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "communicationSkills" : "Clear communication; Stakeholder communication", "documentationSkills" : "Document work thoroughly; Contribute to post-incident reviews", "continuousLearning" : "Expand AI/ML skills", "innovationCreativity" : "Identify opportunities to raise the bar", "problemSolvingSkills" : "Problem-solvers; Investigative instincts; Troubleshooting", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Reduce or eliminate risk; Improve security for Amazon products; Improve security for Amazon services", "qualificationsBasic" : "5+ years cybersecurity experience, Incident response experience, Detection engineering experience, Security operations experience, Working knowledge of AWS, Working knowledge of WAF, Working knowledge of EDR/XDR tools, Working knowledge of network telemetry, Working knowledge of log analysis, Practical knowledge of attacker TTPs, Experience leveraging MITRE ATT&CK, Interpersonal skills, Communication skills, Proficiency with scripting, Proficiency with automation", "qualificationsPreferred" : "Proficiency with SIEM platform, Writing SIEM searches, Creating SIEM alerts, Analyzing SIEM log data, Forensic techniques, Threat hunting techniques, Identify adversary behavior, Detect anomalies, Analyze malware, Experience in large enterprise environments, Supporting multiple business lines, Experience securing distributed systems, Responding to incidents in distributed systems, Experience with cloud-native architectures, Experience with service-oriented environments, Experience with IoT device security, Experience with embedded systems forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you ready to protect millions of homes and families as part of Amazon's elite Device Security Incident Response team? Join us in defending Ring, Blink, eero, and other industry-leading IoT platforms where every incident response decision impacts real people's safety and privacy. We’re looking for a seasoned security engineer to join a cross-functional Incident Response team supporting multiple Amazon devices brands. This is a hands-on role is focused on protecting the security and privacy of millions of customers by responding to incidents that impact real-world products and services. Our customers trust us with their safety and personal spaces, and it’s our responsibility to uphold that trust through strong, effective security practices. You will become a subject matter expert in the brands you support, leading our response to incidents through detection, assessment, containment, eradication, and post-mortem, while identifying opportunities to raise the bar on security for Amazon products and Customers. This high-visibility role requires clear communication, sound judgment under pressure, and the ability to work across organizational boundaries. You will be a strong advocate for customer safety and privacy, ensuring our devices deliver protection without compromise. You will document your work thoroughly, contribute to post-incident reviews, and collaborate with engineering teams to drive long-term improvements across the business. You will have opportunities to utilize, or expand your AI/ML skills, as we focus on automation. Key job responsibilities * Investigate and respond to security incidents in the Devices and Services org, setting the pace, and driving rapid, effective response that reduces or eliminates risk * Act as an incident responder or commander during active security events, coordinating technical response while keeping business stakeholders informed * Conduct thorough post-mortem analysis of security incidents, driving root cause identification, and identifying opportunities to improve security for Amazon products and services * Security consults with builder teams to ensure that security is designed into products from their inception * Collaborate with both technical, and non-technical stakeholders at all levels of the business, to execute rapid, and effective incident response * Develop, maintain, and respond to detections using Splunk/SOAR, as well as internal Amazon tooling * Combat various forms of fraud and abuse, by coordinating with business teams to develop comprehensive prevention/detection/response capabilities * Contribute to team efforts to increase capability and efficiency through automation of manual workloads and increase signal quality using AI/ML tools or approaches * Assist in runbook development, playbook tuning, and continuous process improvements * Participate in an on-call rotation (approx. two weekend days per month) * Work within a global, collaborative Amazon Security team where engineers and specialists support one another to solve complex problems and respond to security challenges together * Coordinate response efforts with other Incident Response teams at Amazon when appropriate, and share learnings * Maintain and support WAF products that protect Amazon services from abuse, drive adoption, evaluate or tune rules * Develop and update SQL queries to investigate security incidents, analyze log data, and extract relevant information from logs, databases and services. A day in the life As a Security Incident Response Engineer, you'll guide our team through complex security challenges impacting millions of customers. You'll: • Spearhead end-to-end incident response across Amazon's device ecosystem • Drive real-time decision-making during active incidents • Conduct impact assessments and implement containment strategies • Develop durable solutions with engineering teams • Proactively hunt threats and create new detection mechanisms • Consult on security for new product designs • Analyze data to identify hidden vulnerabilities We seek naturally curious problem-solvers who combine technical expertise with investigative instincts. You'll be the calm voice in the storm, transforming chaos into clarity and consistently safeguarding our customers' trust in Amazon's devices and services. About the team We're a tight-knit group of Security Engineers united by our mission to protect Amazon's customers. Though small, our impact is outsized. We've driven meaningful improvements across Amazon's device ecosystem through technical excellence and relentless customer advocacy. We're engineers first, approaching challenges with security expertise to create practical solutions. We champion \"better products\" over \"more products,\" solving problems collaboratively with empathy and partnership. We're not the team that just says \"no\" – we find secure paths forward. When incidents arise, we need our builders to feel relief when we arrive. We build bridges, not ivory towers, transforming security from a barrier into an enabler of innovation. Basic Qualifications: - * 5+ years of industry experience in cybersecurity, with a strong foundation in incident response, detection engineering, or security operations - * Working knowledge of AWS, WAF, EDR/XDR tools, network telemetry, and log analysis - * Practical knowledge of attacker tactics, techniques, and procedures (TTPs), with experience leveraging MITRE ATT&CK or similar frameworks to guide incident response or detection engineering - * Strong interpersonal and communication skills; able to calmly manage high-stakes coordination and decision-making - * Proficiency with scripting or automation (e.g., Python, PowerShell, Bash) Preferred Qualifications: - * Proficiency with at least one SIEM platform, including writing searches, creating alerts, and analyzing log data to support security investigations; experience with Splunk strongly preferred - * Exposure to AI/ML-driven anomaly detection, or behavior modeling tools - * Demonstrated ability to use forensic or threat hunting techniques to identify adversary behavior, detect anomalies, analyze potential malware to support containment and eradication - * Security certifications such as CISSP, CISM, CRISC, GCIH, CCIR, GCDA, etc. - * Prior experience in large enterprise environments or supporting multiple business lines - * Experience securing or responding to incidents in large-scale distributed systems, including cloud-native architectures and service-oriented environments - * Experience with IOT device security and embedded systems forensics Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Incident Response Engineer, Devices & Services Security at Amazon.com Services LLC. Skills: Incident response, Security engineering, Detection engineering. Investigate security incidents. Respond to security incidents", "postedDate" : "2026-06-13T10:06:54.792", "createdAt" : "2026-06-13T10:06:54.792", "lastUpdated" : "2026-06-15T08:13:32.312", "ingestTimestamp" : "2026-06-13T10:06:54.792", "mongoId" : "68c2e423f8b1b0376634c56d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072356/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries", "Judgment under pressure", "Calmness", "Incident response", "Security engineering", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis", "Runbook development", "Playbook tuning", "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems", "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA", "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "skillCount" : 42, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "6a2c6a8f74d8ee00a090c9b3", "title" : "Project Manager, Incident Response", "company" : "ABACUS", "industry" : "Cybersecurity", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Project Manager, Incident Response in the US Technology industry, adjusted for a remote work mode and manager experience level." }, "location" : "Remote in US", "locations" : [ "Remote in US" ], "certifications" : [ "PMP certification" ], "timestamp" : "2026-06-15T10:35:48.757", "fingerprint" : "1c88e11e9a6dddc3effeac573435e516572e6903d0011c5dae97ea2497aee0f5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://abacustechnology.com/about/careers/current-vacancies/?gh_jid=7731438003", "externalId" : "7731438003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Systems engineering, Infrastructure deployment, Infrastructure enhancement", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Resource planning", "Continuous improvement", "Client-facing communication", "Expectation management", "Timeline management", "Consultative rapport" ], "hardSkillsList" : [ "Event log analysis", "Syslog analysis", "Monitoring data analysis", "Memory dump analysis", "Troubleshoot issues", "Configure systems", "Test systems", "Implement systems", "Refine systems", "Document systems", "Monitor systems", "Transition systems" ], "softSkillsList" : [ "Leadership", "Persistence", "Calm under pressure" ], "hardSkills" : [ { "name" : "Event log analysis", "level" : "intermediate" }, { "name" : "Syslog analysis", "level" : "intermediate" }, { "name" : "Monitoring data analysis", "level" : "intermediate" }, { "name" : "Memory dump analysis", "level" : "intermediate" }, { "name" : "Troubleshoot issues", "level" : "intermediate" }, { "name" : "Configure systems", "level" : "intermediate" }, { "name" : "Test systems", "level" : "intermediate" }, { "name" : "Implement systems", "level" : "intermediate" }, { "name" : "Refine systems", "level" : "intermediate" }, { "name" : "Document systems", "level" : "intermediate" }, { "name" : "Monitor systems", "level" : "intermediate" }, { "name" : "Transition systems", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Persistence" }, { "name" : "Calm under pressure" } ], "majorSkills" : "Incident response, Project delivery, Client management", "majorSkillsList" : [ "Incident response", "Project delivery", "Client management" ], "coreResponsibilities" : "Coordinate external technical projects, Follow established core processes, Follow project templates, Follow methodologies, Lead Professional Services stand-ups, Review event logs, Review Syslogs, Review monitoring data, Review memory dumps, Troubleshoot issues, Provide security-enhancing solutions, Maintain billable utilization targets, Generate mandatory reports, Update mandatory reports daily, Meet project deadlines, Exceed project deadlines, Keep projects profitable, Measure project success, Leverage cost variance, Leverage schedule variance, Contribute to customer satisfaction, Record change details, Record time worked, Record work notes in ServiceNow, Identify process improvement opportunities, Execute project deliverables, Transition deliverables to stakeholders, Perform approved changes, Communicate project status internally, Communicate project status externally, Provide project follow-ups, Provide requested feedback", "teamCollaboration" : "Cross-functional teams; Client calls; Internal communication; External communication", "projectManagementSkills" : [ "Project management", "Waterfall projects", "Process management", "Methodologies" ], "domainKnowledge" : "Incident response; Technical environments; Containment strategies; Recovery strategies; MFA; Endpoint protection; Systems; Applications; Infrastructures", "domainList" : [ "incident-response", "technical-environments", "containment-strategies", "recovery-strategies", "mfa", "endpoint-protection", "systems", "applications", "infrastructures" ], "domainSpecificKnowledge" : [ "Incident response", "Technical environments", "Containment strategies", "Recovery strategies", "MFA", "Endpoint protection", "Systems", "Applications", "Infrastructures" ], "toolProficiency" : [ "ServiceNow" ], "communicationSkills" : "Client-facing communication; Verbal communication; Writing skills; Professional wording; Grammatically pristine; Clear communication; Effective communication; Persuasive communication; Translate technical to C-Suite; Convey energy; Convey confidence; Convey interest; Convey competence; Convey professionalism; Convey trustworthiness", "documentationSkills" : "Thorough documentation; Status updates", "continuousLearning" : "Online courses", "problemSolvingSkills" : "Troubleshoot issues; Sort through chaos; Make order; Uncover hidden gems; Scale roadblocks; Dodge roadblocks; Blast through roadblocks", "specialRequirements" : "On-call rotation, Work into evenings, Work into weekends, Work into holidays, Minimal travel, Open to travel", "outcomesObjectives" : "Result in progressive change; Result in secure enhancements; Establish ownership of direction; Ensure parties are aligned; Deliver strategic initiatives; Achieve high customer satisfaction scores; Keep projects profitable; Not skimp on quality", "qualificationsBasic" : "5 years of experience delivering IT waterfall projects, Managed projects as assigned PM, Owned client-facing projects, Experience with systems and virtualization, Exposure to enterprise infrastructures, Adaptable approach to working hours, Open to travel when needed", "qualificationsPreferred" : "Four-year degree in relevant field, PMP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Job Summary: As our Incident Response Project Manager, you will be primarily dedicated to external, client-facing projects within our Incident Response team. You will be the driving force behind successful, thorough, and robust project deliverables that result in progressive change and secure enhancements to our client’s technical environments.As the primary face of the team on client calls, you will field questions, establish trust, and set precedent as the go-to person for all incident-related matters. You will be tasked with understanding the current state of an incident, establishing ownership of the overall direction of containment and recovery, and ensuring all parties are aligned with the verticals defined. Constantly in sync with the primary lead engineer leading containment and recovery strategies and delivering agreed-upon strategic initiatives to all parties, you will work as part of a dynamic, flexing team – ready to respond at a moment’s notice mapping into your team's on-call rotation. This position will report directly to our Director of Incident Response PMO. Responsibilities (including, but not limited to): Project Management Coordinates multiple, external technical projects from inception to completion: Follows established core processes, project templates, and methodologies Takes a lead in Professional Services stand-ups review event logs, Syslogs, monitoring data, and memory dumps to troubleshoot issues. Security-enhancing solutions for systems and applications (including MFA and endpoint protection). Metrics Measuring Success Maintains billable utilization targets Ensures all mandatory reports are generated and updated daily Meets or exceeds deadlines for all assigned projects Keeps projects profitable while not skimping on quality Leverages cost variance and schedule variance formulas to measure project success Contributes to the team’s attainment of high customer satisfaction scores on project delivery Records complete change details, time worked entries, and work notes in ServiceNow in real-time Identifies opportunities for process improvement Following Process Follows Entara’s project process to execute project deliverables: configure, test, implement, refine, document, monitor, and transition to appropriate stakeholders. Follows Entara’s Change Management Process to perform approved changes in client environments Communicates internally and (as directed) externally to provide timely information regarding project status, promised follow-ups, and requested feedback on a detailed and professional basis. Skills and Experience: You’re a knowledge seeker. Regardless of method, you have obtained and exposed yourself to knowledge centers that have qualified you to master technical project delivery and the systems engineering required to successfully recover, deploy, and enhance infrastructures. You ideally have a four-year degree in a relevant field and are working towards or have already obtained your PMP certification. You’ve managed projects as the assigned “PM” instead of only having delivered them as an engineer. You enjoy the dynamic of wearing multiple hats and taking the lead on client-facing communication, expectations, and timelines. You’ve owned client-facing projects and have established a consultative rapport resulting in high client satisfaction levels upon project closure. You have at least 5 years of experience delivering IT waterfall projects working with systems and virtualization with exposure to enterprise infrastructures. You keep us true to our word. You have a tried-and-true organizational system to keep yourself (and others) on task while ensuring exceptional quality. You possess a winning combination of superb writing skills and highly refined verbal communication skills. You convey energy, confidence, and genuine interest over a call just as easily as you convey competence, professionalism, and trustworthiness in person. You translate to a C-Suite audience as seamlessly as you “talk tech” with engineers. Your emails are professionally worded, grammatically pristine, with the right pinch of personality. In any medium, you pride yourself in clear, effective, and persuasive communication. You have an approach to working hours that is more adaptable than the traditional \"9-to-5\". As this team responds to business-critical remediation projects, we are looking for an individual who is career-driven and won’t shrink back when work requirements extend into evenings, weekends, and holidays. While travel is minimal, you’re also open to getting on a plane when needed to be present at client sites when a project requires it. On the flip side, your hard work is rewarded with a generous comp plan that grows with the efforts you contribute, a flexible PTO policy, and an equally inspiring team that climbs mountains together. You are ready to be an effective remote worker and have a dedicated, private space for a home office with a private internet connection with at least 50MBPS bandwidth. Public WiFi and shared common spaces do not meet these standards. Desired Personality Traits: A Mythical Character. You aren’t alarmed when someone expects you to be a hero; in fact, you pride yourself on frequently delivering big just when all hope seems lost. Your persistence is notable, and you are a determined soul who insists on turning “We can’t” into “We can” If you meet a roadblock, you’ll try to scale it, dodge it, or blast through it before ever admitting defeat. The Devil is in the Details. You have an angelic ability to sort through chaos and make order. Your eye and attention for details helps you uncover hidden gems, while your thorough documentation and status updates capture and convey every facet of each stone. Corporate Usain Bolt. You’re capable of moving rapidly from task to task without getting rattled. Your desk is clear, your email inbox is empty, your kitchen counters aren’t cluttered, and you never spend 15 minutes tearing around the house in a desperate hunt for your car keys or train pass. You are a lean, mean, well-oiled machine. A Combo Meal. Your style is winningly ambidextrous. While you are known to be a loyal teammate and never falter on your commitment to seeing others thrive, you are not a push-over. You will fight back and advocate for the best marriage of client desires and superb delivery-pushing us along the path towards perfection. If Samwise Gamgee and Monica Geller had a child, it would be you. Emotionally Mature. Through your years of experience, you’ve learned that occasional hiccups are inevitable and now know enough to just keep moving towards the end goal. You’re calm under pressure, encourage respectful dialog, and understand that communication is the balm that can soothe the sting of conflict. The Benefits of Working for Entara, an Abacus Group Company: Exposure to a diverse array of technologies. Internal opportunities for career advancement. Part of a team of experienced professionals that aim to deliver exceptional service Competitive compensation. Robust benefits package: medical, dental, vision, disability, life insurance, 401k, and PTO. Opportunities to further technical education through online courses. Positive, friendly, and supportive office environment.", "summaryDescription" : "Project Manager, Incident Response at ABACUS. Skills: Incident response, Project delivery, Client management. Coordinate external technical projects. Follow established core processes", "postedDate" : "2026-06-14T01:43:32.664", "createdAt" : "2026-06-14T01:43:32.664", "lastUpdated" : "2026-06-15T10:35:48.757", "ingestTimestamp" : "2026-06-14T01:43:32.664", "mongoId" : "6a2c6a8f74d8ee00a090c9b3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Event log analysis", "Syslog analysis", "Monitoring data analysis", "Memory dump analysis", "Troubleshoot issues", "Configure systems", "Test systems", "Implement systems", "Refine systems", "Document systems", "Monitor systems", "Transition systems", "Leadership", "Persistence", "Calm under pressure", "Incident response", "Project delivery", "Client management", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Resource planning", "Continuous improvement", "Client-facing communication", "Expectation management", "Timeline management", "Consultative rapport", "Project management", "Waterfall projects", "Methodologies", "Technical environments", "Containment strategies", "Recovery strategies", "MFA", "Endpoint protection", "Systems", "Applications", "Infrastructures", "PMP certification", "ServiceNow" ], "skillCount" : 41, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a09f21e1663d49372a845c6", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon Web Services, Inc.", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:06:55.041", "fingerprint" : "904f0aa67a81b6232f23b2103c3a0821861d5aeddf314d79f37eabe4d6677bc4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "externalId" : "7b963d63-e85c-488e-8ac7-ba83a3f3d74f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI, Amazon Bedrock", "professionalSkills" : [ "Security response", "Software development", "Automation" ], "hardSkillsList" : [ "Software development", "System design", "Automation" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software processes, Design intelligent automations, Implement intelligent automations, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with global teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Leverage AWS services, Create scalable solutions, Enhance security operations, Deliver delightful software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS security; Corporate network security; Security response", "domainList" : [ "aws-security", "corporate-network-security", "security-response" ], "domainSpecificKnowledge" : [ "AWS security", "Corporate network security", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Amazon Bedrock, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon Web Services, Inc.. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T16:08:57.360", "createdAt" : "2026-06-13T16:08:57.360", "lastUpdated" : "2026-06-15T06:06:55.041", "ingestTimestamp" : "2026-06-13T16:08:57.360", "mongoId" : "6a09f21e1663d49372a845c6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Automation", "Security software", "AWS services", "Security response", "AWS security", "Corporate network security" ], "skillCount" : 8, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69d140072beec4dd3ddbe417", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:05:22.074", "fingerprint" : "e2894a4e26f433c9bfa4feb2c29c9e1333a0d467b9baa905cfe0e71496e2c170", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10383075/apply", "externalId" : "6879b3a1-ef52-4a67-b131-e0bccf3540b2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvement opportunities, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network", "domainList" : [ "aws-security", "corporate-network" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Respond to threats; Respond to vulnerabilities", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity; Deliver efficiency gains; Deliver productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T13:03:49.850", "createdAt" : "2026-06-13T13:03:49.850", "lastUpdated" : "2026-06-15T06:05:22.074", "ingestTimestamp" : "2026-06-13T13:03:49.850", "mongoId" : "69d140072beec4dd3ddbe417", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10383075/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c8c8374d8ee00a0975b5a", "title" : "Incident Response Lead", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "GCIH", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T12:05:20.732", "fingerprint" : "bddddbefd297cde0f29d2286596a2e145615d870cd25df0e237c4a59536e642a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/90e465bb-f1fb-4763-892e-320780db4f6f/application", "externalId" : "90e465bb-f1fb-4763-892e-320780db4f6f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, EDR, Cloud security monitoring, Digital forensics, Threat detection", "professionalSkills" : [ "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification" ], "hardSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "SOC operations", "level" : "intermediate" }, { "name" : "Host investigation", "level" : "intermediate" }, { "name" : "Cloud investigation", "level" : "intermediate" }, { "name" : "Log investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Threat detection, SOC operations", "majorSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations" ], "coreResponsibilities" : "Lead incident response activities, Serve as incident commander, Partner with SOC, Validate alerts, Guide investigations, Drive containment, Drive eradication, Conduct host investigations, Conduct cloud investigations, Conduct log investigations, Coordinate with forensic firms, Maintain incident response playbooks, Improve escalation procedures, Improve communication workflows, Lead post-incident reviews, Lead root cause analysis, Define remediation actions, Track remediation actions, Develop tabletop exercises, Execute incident simulations, Support breach impact assessments, Support regulatory notification, Improve detection capabilities, Improve response capabilities, Own incident metrics, Own incident reporting, Report response times, Report trends, Report risk reduction", "teamCollaboration" : "24x7 SOC provider; Cross-functional stakeholders; Security, IT, GRC, Legal", "projectManagementSkills" : [ "Remediation tracking" ], "domainKnowledge" : "Cloud-native environments; MITRE ATT&CK; GDPR; HIPAA; PCI", "domainList" : [ "cloud-native-environments", "mitre-att-ck", "gdpr", "hipaa", "pci" ], "domainSpecificKnowledge" : [ "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI" ], "toolProficiency" : [ "SIEM platforms", "EDR tools", "Cloud monitoring" ], "communicationSkills" : "Cross-functional coordination", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation rotation", "outcomesObjectives" : "Systemic risk reduction", "qualificationsBasic" : "7+ years incident response, Lead incident investigations, Host, cloud, log investigations, SIEM platforms expertise, EDR tools expertise, Cloud security monitoring expertise, Work with external SOC, Attack frameworks understanding, GDPR, HIPAA, PCI support, Excellent communication skills, Bachelor's degree or certifications", "qualificationsPreferred" : "GCIH certification, GCFA certification, CISSP certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "At WHOOP, we’re on a mission to unlock human performance and healthspan. Our wearable technology provides personalized insights that help millions of members better understand their bodies and make smarter decisions about training, recovery, and lifestyle. We are seeking a Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands-on responder for security incidents, partnering closely with WHOOP’s 24x7 SOC provider and cross-functional stakeholders to investigate, contain, and remediate threats. This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC, and Legal. RESPONSIBILITIES: - - Lead hands-on incident response activities, serving as the primary internal escalation point for security events - Serve as the central incident commander across Security, IT, GRC, and Legal during active incidents - Partner with the SOC to validate alerts, guide investigations, and drive containment and eradication efforts - Conduct host, cloud, and log-based investigations, and coordinate with external forensic firms when needed - Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows - Lead post-incident reviews and root cause analysis, ensuring remediation actions are clearly defined and tracked - Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness - Partner with GRC and Legal to support breach impact assessments and regulatory notification processes - Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems - Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives - Participate in an on-call escalation rotation to provide after-hours incident leadership when required QUALIFICATIONS: - - 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations - Proven experience leading incident investigations in complex, cloud-native environments - Strong experience conducting host, cloud, and log-based investigations - Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring - Experience working with external SOC or MDR providers - Strong understanding of attack frameworks (MITRE ATT&CK) and their application to detection and response - Experience supporting breach response obligations under GDPR, HIPAA, PCI, or similar regulatory frameworks - Excellent communication skills with the ability to coordinate cross-functional stakeholders under pressure - Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent) This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements. ", "summaryDescription" : "Incident Response Lead at WHOOP. Skills: Incident response, Digital forensics, Threat detection, SOC operations. Lead incident response activities. Serve as incident commander", "createdAt" : "2026-06-14T04:00:46.619", "lastUpdated" : "2026-06-15T12:05:20.732", "ingestTimestamp" : "2026-06-14T04:00:46.619", "mongoId" : "6a2c8c8374d8ee00a0975b5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation", "Leadership", "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification", "Remediation tracking", "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI", "GCIH", "GCFA", "CISSP", "SIEM platforms", "EDR tools", "Cloud monitoring" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c8bbe74d8ee00a097397f", "title" : "Project Manager (Incident Response)", "company" : "MOXFIVE", "industry" : "PMO", "salary" : { "min" : 80000.0, "max" : 120000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CAPM", "PMP", "CSM" ], "timestamp" : "2026-06-15T05:22:05.118", "fingerprint" : "3d1634295f9f4c519ba215312b85f54aa5fdb74d333a0d872e01a70dca4acf3e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/moxfive/67da822e-6f01-4495-be15-23a58c291040/application", "externalId" : "67da822e-6f01-4495-be15-23a58c291040", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceLevel" : "Manager", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Financial tracking", "Budget monitoring", "Time tracking", "Project accounting" ], "hardSkills" : [ { "name" : "Financial tracking", "level" : "intermediate" }, { "name" : "Budget monitoring", "level" : "intermediate" }, { "name" : "Time tracking", "level" : "intermediate" }, { "name" : "Project accounting", "level" : "intermediate" } ], "majorSkills" : "Incident response, Project management, Client communication", "majorSkillsList" : [ "Incident response", "Project management", "Client communication" ], "coreResponsibilities" : "Coordinate incident response projects, Align technical workstreams, Serve as connection to clients, Serve as connection to technical teams, Serve as connection to legal counsel, Serve as connection to stakeholders, Own project documentation, Generate Statements of Work, Generate change orders, Generate level of efforts, Compile status updates, Distribute status updates, Monitor project budgets, Track time, Track expenses, Flag scope creep, Coordinate scheduling for meetings, Coordinate scheduling for technical activities, Coordinate scheduling for stakeholder briefings, Identify project risks, Surface project risks, Contribute to process improvement, Contribute to system improvement", "teamCollaboration" : "Cross-functional workstreams; Client coordination; Technical team coordination; Legal counsel coordination; Stakeholder coordination", "projectManagementSkills" : [ "Project coordination", "Project management", "Milestone logging", "Deliverable scheduling", "Call cadence management", "Scope creep management", "Risk identification" ], "domainKnowledge" : "Incident response; Cybersecurity; IT services; Ransomware attacks; Forensics; Restoration; Remediation; Legal documentation; Client communications", "domainList" : [ "incident-response", "cybersecurity", "it-services", "ransomware-attacks", "forensics", "restoration", "remediation", "legal-documentation", "client-communications" ], "domainSpecificKnowledge" : [ "Incident response", "Cybersecurity", "IT services", "Ransomware attacks", "Forensics", "Restoration", "Remediation", "Legal documentation", "Client communications" ], "toolProficiency" : [ "Microsoft Office", "Excel", "PowerPoint", "Salesforce", "HubSpot" ], "communicationSkills" : "Status reports; Client-facing documentation; Stakeholder briefings", "documentationSkills" : "Project documentation; Trackers; Status reports; Milestone logs; Deliverable schedules; Call cadence", "continuousLearning" : "Process improvement; System improvement", "problemSolvingSkills" : "Complexity management", "specialRequirements" : "On-call schedule rotation", "outcomesObjectives" : "Keep projects organized; Shape client experience; Keep response on track; Maintain client trust; Engagements close with precision; Engagements close with professionalism", "qualificationsBasic" : "3+ years project coordination experience, 3+ years project management experience, Bachelor's degree or equivalent experience", "qualificationsPreferred" : "Background in consulting, Background in professional services, Background in client-facing coordination, Exposure to cybersecurity, Exposure to IT services, Exposure to incident response, Experience generating SOWs, Experience generating proposals, Experience generating contract documentation, Familiarity with legal requirements, Familiarity with insurance requirements, Experience with CRM systems, CAPM certification, PMP certification, CSM certification, Actively working toward certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Project Manager (Incident Response) Who You Are You are the person who makes chaos look manageable. When a cyberattack hits and five workstreams are spinning at once, you're the one holding the center, tracking every moving part, keeping every stakeholder informed, and making sure nothing falls through the cracks. You don't need to speak fluent threat actor, but you know exactly what needs to happen next and who needs to know about it. You speak with clients just as fluently as you speak with the technical team. You know the difference between a status update that actually helps and one that just creates more questions. You've managed projects under pressure before, and you've learned that in high-stakes environments, precision and calm are superpowers. You're wired for complexity. Juggling 5–8 concurrent engagements doesn't overwhelm you, it's where you do your best work. You care about the details that others overlook, because you know those details are what keep a response on track and a client's trust intact. Why You Matter You'll be joining MOXFIVE as a Project Manager supporting our Incident Response practice - the operational backbone that keeps our engagements running when organizations need us most. When ransomware strikes, the technical work is only part of the story. Forensics, restoration, remediation, legal documentation, client communications all must move simultaneously, and someone has to orchestrate it all. That's you. You're the reason our technical teams can stay focused on the response itself, our clients stay informed without feeling lost, and our engagements close with the precision and professionalism MOXFIVE is known for. Your work doesn't just keep projects organized. It directly shapes how organizations experience one of the most stressful moments they'll ever face. What You'll Do - Coordinate incident response projects across concurrent technical workstreams keeping everything and everyone aligned - Serve as the connection between clients, technical teams, legal counsel, and internal MOXFIVE stakeholders - Own project documentation: trackers, status reports, milestone logs, deliverable schedules, call cadence. They must be accurate, complete, and always current - Generate Statements of Work, change orders, and level of efforts with clear scope and pricing - Compile and distribute timely status updates that tell the story of where an engagement stands - Monitor project budgets, track time and expenses, and flag potential scope creep before they become a problem - Coordinate scheduling for client meetings, technical activities, and stakeholder briefings across a portfolio of active engagements - Identify and surface project risks early, working with stakeholders to keep things on course - Participate in a rotating on-call schedule (roughly once every six weeks) to support active incident response operations - Contribute to the ongoing improvement of MOXFIVE's project management processes and systems What You'll Bring - 3+ years of project coordination or project management experience, ideally in consulting, professional services, or technology environments - Exceptional organizational skills and meticulous attention to detail, you manage multiple concurrent projects without losing track of what matters - Strong written and verbal communication skills, with the ability to create clear, confident status reports and client-facing documentation - Proficiency with project management platforms - Advanced skills in Microsoft Office, particularly Excel and PowerPoint - Comfort interfacing with clients, partners, and senior stakeholders in fast-moving, high-pressure situations - Financial tracking experience - budget monitoring, time tracking, and basic project accounting - A process-oriented mindset with an eye for where things can be done better - Bachelor's degree in business, communications, or a related field. Or the equivalent in real-world experience Bonus points for: - Background in consulting, professional services, or client-facing coordination roles - Exposure to cybersecurity, IT services, or incident response environments - Experience generating SOWs, proposals, or contract documentation - Familiarity with legal or insurance-related project requirements - Experience with CRM systems like Salesforce or HubSpot - CAPM, PMP, CSM, or other project management certification (or actively working toward one)", "summaryDescription" : "Project Manager (Incident Response) at MOXFIVE. Skills: Incident response, Project management, Client communication. Coordinate incident response projects. Align technical workstreams", "createdAt" : "2026-06-13T22:06:35.396", "lastUpdated" : "2026-06-15T05:22:05.118", "ingestTimestamp" : "2026-06-13T22:06:35.396", "mongoId" : "6a2c8bbe74d8ee00a097397f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 80000, "salaryAnnualMax" : 120000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Financial tracking", "Budget monitoring", "Time tracking", "Project accounting", "Incident response", "Project management", "Client communication", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Project coordination", "Milestone logging", "Deliverable scheduling", "Call cadence management", "Scope creep management", "Risk identification", "Cybersecurity", "IT services", "Ransomware attacks", "Forensics", "Restoration", "Remediation", "Legal documentation", "Client communications", "CAPM", "PMP", "CSM", "Microsoft Office", "Excel", "PowerPoint", "Salesforce", "HubSpot" ], "skillCount" : 36, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb14f74d8ee00a09dccc6", "title" : "Engineering Manager, Security", "company" : "Recharge", "industry" : "Open Positions", "salary" : { "min" : 6000000.0, "max" : 9000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Security Engineering Manager in the SaaS industry, adjusted for manager seniority and remote work in India." }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CISSP", "CCSP", "GSEC" ], "timestamp" : "2026-06-15T08:57:31.228", "fingerprint" : "86f3b15525e56dad6ec32727214201266c09044bcc7ebb551ed1e728817ef4e7", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/recharge/df77f239-a1d9-4d95-a4a5-49ff4d1af3b2/application", "externalId" : "df77f239-a1d9-4d95-a4a5-49ff4d1af3b2", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Network security, Network protocols, Firewalls, Intrusion prevention, Cloud security, CSPM tools, VPN, SAML, OAuth, WAF, SIEM, Vulnerability Management, Malware defense, Backup systems, Disaster recovery, Helm, Terraform, Docker, Linux, Kubernetes, Monitoring, Metrics, Logging, GCP, AWS, Azure, Python, Flask, React, Vue.js, Snowflake, Looker, Wiz, HackerOne, Gitlab, Splunk, Google Cloud Armor", "professionalSkills" : [ "Network architecture", "Application security", "Incident response", "Vulnerability assessment", "Team management", "Process improvement", "Agile processes" ], "hardSkillsList" : [ "Network configuration", "Firewall management", "Intrusion prevention systems", "SIEM configuration", "Vulnerability assessment", "Incident response planning", "Security incident response" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Network configuration", "level" : "intermediate" }, { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Intrusion prevention systems", "level" : "intermediate" }, { "name" : "SIEM configuration", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Incident response planning", "level" : "intermediate" }, { "name" : "Security incident response", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Network security architecture, Application security architecture, Cloud infrastructure security, Vulnerability management", "majorSkillsList" : [ "Network security architecture", "Application security architecture", "Cloud infrastructure security", "Vulnerability management" ], "coreResponsibilities" : "Manage engineering team, Scale engineering team, Fill team gaps, Develop team culture, Foster collaboration, Foster open communication, Deliver outcomes, Be responsible for team output, Write code, Review code, Improve team productivity, Refine agile processes, Create methods to increase efficiency, Design secure network architectures, Implement secure network architectures, Maintain secure network architectures, Ensure data confidentiality, Ensure data integrity, Ensure data availability, Create network documentation, Maintain network documentation, Create security documentation, Maintain security documentation, Integrate security measures into network designs, Integrate security measures into network implementations, Integrate application security tools, Integrate application security processes, Utilize AI tooling for skills files, Apply application security practices, Configure firewalls, Manage firewalls, Configure intrusion prevention systems, Manage intrusion prevention systems, Configure SIEM, Manage SIEM, Configure network security devices, Manage network security devices, Monitor network traffic, Respond to security incidents, Conduct vulnerability assessments, Remediate security risks, Apply proactive measures against threats, Maintain incident response plans, Improve incident response plans, Participate in tabletop exercises, Lead incident response efforts, Investigate security incidents, Mitigate security incidents, Mentor engineers on security configurations, Mentor engineers on security best practices, Investigate security posture, Analyze security posture, Evangelize good security posture", "teamCollaboration" : "Cross-functional teams; Internal teams; External stakeholders", "projectManagementSkills" : [ "Agile processes" ], "domainKnowledge" : "Cloud-native environments; Network protocols; Firewall configurations; Intrusion detection systems; Intrusion prevention systems; Cloud infrastructure security; CSPM tools; VPN; Remote access management; Authentication technologies; SAML; OAuth; WAF technologies; SIEM tools; Vulnerability Management; Virus defense systems; Malware defense systems; Backup systems; Disaster recovery planning; Security assessment techniques", "domainList" : [ "cloud-native-environments", "network-protocols", "firewall-configurations", "intrusion-detection-systems", "intrusion-prevention-systems", "cloud-infrastructure-security", "cspm-tools", "vpn", "remote-access-management", "authentication-technologies", "saml", "oauth", "waf-technologies", "siem-tools", "vulnerability-management", "virus-defense-systems", "malware-defense-systems", "backup-systems", "disaster-recovery-planning", "security-assessment-techniques" ], "domainSpecificKnowledge" : [ "Cloud-native environments", "Network protocols", "Firewall configurations", "Intrusion detection systems", "Intrusion prevention systems", "Cloud infrastructure security", "CSPM tools", "VPN", "Remote access management", "Authentication technologies", "SAML", "OAuth", "WAF technologies", "SIEM tools", "Vulnerability Management", "Virus defense systems", "Malware defense systems", "Backup systems", "Disaster recovery planning", "Security assessment techniques" ], "toolProficiency" : [ "Akamai", "Cloudflare", "Google Cloud Armor", "Imperva", "Splunk", "LogRhythm", "Panther", "Crowdstrike", "Sentinel One", "Trend Micro", "Helm", "Terraform", "Docker", "Ansible", "Nginx", "Redis", "CloudSQL", "MySQL", "Snowflake", "Looker", "Wiz", "HackerOne", "Gitlab" ], "communicationSkills" : "Excellent communication", "documentationSkills" : "Network documentation; Security documentation", "problemSolvingSkills" : "Problem-solving skills", "qualificationsBasic" : "Network security design experience, In-depth knowledge of network protocols, Firewall configurations knowledge, Intrusion detection/prevention systems knowledge, Cloud infrastructure security knowledge, Hardening standards knowledge, CSPM tools knowledge, VPN/remote access management knowledge, Authentication technologies knowledge, SAML knowledge, OAuth knowledge, WAF technologies knowledge, SIEM tools configuration experience, Extensive knowledge of Vulnerability Management, Virus and malware defense systems knowledge, Backup systems knowledge, Disaster recovery planning knowledge, Security assessment tools experience, Security assessment techniques experience, Ability to manage multiple projects, Ability to learn new systems, Ability to support new applications, Analytical skills, Problem-solving skills, Excellent communication skills, Helm experience, Terraform experience, Docker experience, Linux experience, Kubernetes experience, 2+ years Monitoring experience, 2+ years Metrics experience, 2+ years Logging experience, 2+ years SIEM tools configuration experience, 5+ years cloud-native environments experience, Bachelor's degree in Computer Science, Bachelor's degree in Information Technology", "qualificationsPreferred" : "CISSP certification, CCSP certification, GSEC certification, Relevant certifications equivalent", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Recharge is the subscription platform for the world’s fastest-growing and most innovative brands. Shopify’s premier subscription solution, Recharge is on a mission to build the future of commerce around customer retention. Known for its relentless product innovation and focus on ease of use, Recharge helps merchants deliver seamless customer experiences that drive customer retention and revenue growth. The Recharge platform leverages data from over 100 million shoppers to help brands more successfully set up, manage, and grow their subscription businesses. Recharge is a hands-on partner to over 20,000 brands globally — including quip, Dr. Squatch, Blueland, Estrid, Oats Overnight, Bobbie, and more. Learn more at: getrecharge.com http://getrecharge.com OVERVIEW - As an Engineering Manager, Security you will play a pivotal role in designing, implementing, and maintaining robust security measures to safeguard our cloud network infrastructure. You will be responsible for ensuring the confidentiality, integrity, and availability of our critical systems, as well as proactively identifying and mitigating potential security threats. - In this role, you will be a core contributor in ensuring the security of Recharge’s cloud platform. You will collaborate, both within and outside of your team to clarify, theorize, figure out, and decide solutions to complex problems. While this is a leadership role, the person in this role is expected to be a player/coach who isn’t afraid to get their hands dirty. WHAT YOU’LL DO - Leadership - Manage a first-class engineering team that will scale as the company and business grows, identifying and filling any team gaps. - Develop a team-oriented, supportive culture with a strong focus on creating a working environment that fosters collaboration, open communication, and delivering outcomes. - Be responsible for team output and hands on day-to-day writing and reviewing code. - Constantly improve team productivity, refine agile processes, and create methods to increase efficiency. - Network Security Architecture: - Design, implement, and maintain secure network architectures, ensuring the confidentiality, integrity, and availability of data. - Create and maintain network and security documentation. - Collaborate with cross-functional teams to integrate security measures into network designs and implementations. - Application Security Architecture: - Integrate application security tools and processes with automated release management tools. - Utilize AI tooling to implement skills files for vulnerability triage, root cause analysis, scope analysis and vision MR creation. - Utilize your strong working knowledge of our technical stack to apply sound application security practices. - Firewall and Intrusion Prevention: - Configure and manage firewalls (including WAFs), intrusion prevention systems, SIEM, and other network security devices and/or tools. - Monitor network traffic for unusual activity and respond to security incidents in a timely manner. - Vulnerability Assessment: - Conduct regular vulnerability assessments on network infrastructure to identify and remediate potential security risks. - Stay abreast of emerging threats and vulnerabilities, applying proactive measures to protect against them. - Incident Response: - Maintain and continuously improve incident response plans, participate in tabletop exercises, and lead incident response efforts when necessary. - Collaborate with internal teams and external stakeholders to investigate and mitigate security incidents. - Mentor other engineers on security configurations and best practices - Investigate, analyze and evangelize good security posture throughout the organization - Live by and champion our values: Accountability, Collaboration, Iteration and Details WHAT YOU’LL BRING - Network security design experience and an an in-depth knowledge of network protocols, firewall configurations, and intrusion detection/prevention systems - Cloud infrastructure security knowledge including hardening standards, CSPM tools, VPN/remote access management and authentication technologies such as SAML, OAuth - Robust understanding of WAF technologies such as Akamai, Cloudflare, Google Cloud Armor, Imperva, etc - Experience configuring SIEM tools such as Splunk, LogRhythm, Panther etc - Extensive knowledge of Vulnerability Management practices - Understanding of virus and malware defense systems such as Crowdstrike, Sentinel One, Trend Micro, etc - Understanding of backup systems and disaster recovery planning - Experience with security assessment tools and techniques - Ability to manage multiple projects, activities, and tasks simultaneously - Ability to learn and support new systems and applications - Strong analytical and problem-solving skills - Excellent communication and collaboration skills - Willingness to participate in a first line of support on-call rotation - Desire to work remotely and to make an impact WHAT YOU’LL BRING - 3+ years experience managing high performing security teams - 10+ years experience in network and/or security roles, with a focus on edge security tools - 2+ years experience with Infrastructure as Code tools such as Helm, Terraform, Docker, Linux, Kubernetes, etc - 2+ years experience with Monitoring, Metrics and Logging solutions such as Splunk, Datadog, ELK stack, Axiom, etc - 2+ years experience configuring SIEM tools such as Splunk, LogRhythm, Panther, etc - 5+ years experience in cloud-native environments such as GCP, AWS, or Azure - Bachelor’s degree in Computer Science, Information Technology, or related field - Relevant certifications such as CISSP, CCSP, GSEC, or equivalent OUR STACK - GCP, Kubernetes, GitLab, Helmfile, Terraform, Docker, Ansible, Nginx, Redis, CloudSQL/MySQL, Python, Flask, React, Vue.js, Snowflake, Looker, Wiz, HackerOne, Gitlab Application Security, Splunk (including Enterprise Security), Google Cloud Armor Compensation Recharge’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. Salary ranges are designed to be competitive and aligned with country specific practices, while individual compensation is determined by skills, qualifications, and experience. The compensation listed is not inclusive of any equity and benefits that might exist in your total compensation package. - Hiring range in the US $196,000 USD - $245,000 USD Application window anticipated to close: 7/1/2026. If you’re interested in this opportunity, please submit an application as soon as possible. Interview recording & AI notetakers To protect privacy, legal compliance, and interviewer/candidate experience, recording, transcribing, or using AI notetaker tools during interviews is not permitted without our prior written consent. Handwritten notes are welcome. If you need an accommodation (e.g., captions), email recruiting@getrecharge.com before your interview—we’ll arrange an approved solution. Benefits at a Glance - Medical, dental and vision plans - Retirement plan with employer contribution - Flexible Time Off - Paid Parental Leave - Monthly Remote Life and Merchant stipends Recharge http://www.rechargepayments.com/ | Instagram https://www.instagram.com/rechargepayments/?hl=en | Twitter https://twitter.com/ReChargePayment | Facebook https://www.facebook.com/rechargepayments/ Recharge Payments is an equal opportunity employer. In addition to EEO being the law, it is a policy that is fully consistent with our principles. All qualified applicants will receive consideration for employment without regard to status as a protected veteran or a qualified individual with a disability, or other protected status such as race, religion, color, national origin, sex, sexual orientation, gender identity, genetic information, pregnancy or age. Recharge Payments prohibits any form of workplace harassment.", "summaryDescription" : "Engineering Manager, Security at Recharge. Skills: Network security architecture, Application security architecture, Cloud infrastructure security, Vulnerability management. Manage engineering team. Scale engineering team", "createdAt" : "2026-06-14T04:17:19.966", "lastUpdated" : "2026-06-15T08:57:31.228", "ingestTimestamp" : "2026-06-14T04:17:19.966", "mongoId" : "6a2cb14f74d8ee00a09dccc6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Network configuration", "Firewall management", "Intrusion prevention systems", "SIEM configuration", "Vulnerability assessment", "Incident response planning", "Security incident response", "Leadership", "Mentoring", "Network security architecture", "Application security architecture", "Cloud infrastructure security", "Vulnerability management", "Network architecture", "Application security", "Incident response", "Team management", "Process improvement", "Agile processes", "Cloud-native environments", "Network protocols", "Firewall configurations", "Intrusion detection systems", "CSPM tools", "VPN", "Remote access management", "Authentication technologies", "SAML", "OAuth", "WAF technologies", "SIEM tools", "Vulnerability Management", "Virus defense systems", "Malware defense systems", "Backup systems", "Disaster recovery planning", "Security assessment techniques", "CISSP", "CCSP", "GSEC", "Akamai", "Cloudflare", "Google Cloud Armor", "Imperva", "Splunk", "LogRhythm", "Panther", "Crowdstrike", "Sentinel One", "Trend Micro", "Helm", "Terraform", "Docker", "Ansible", "Nginx", "Redis", "CloudSQL", "MySQL", "Snowflake", "Looker", "Wiz", "HackerOne", "Gitlab" ], "skillCount" : 63, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a306afff292fd229cfceb65", "title" : "Manager, Infrastructure Security Engineering", "company" : "NBCUniversal", "industry" : "Entertainment", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Manager, Infrastructure Security Engineering in New York, NY, adjusted for the media industry and full-time employment." }, "location" : "New York, NEW YORK, United States", "locations" : [ "New York", "NEW YORK", "United States" ], "timestamp" : "2026-06-16T12:04:32.119", "fingerprint" : "822ff40ef269531e2ae91f9239ef1a67c54a46c9b826d25ad7e4cd13974001fb", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/NBCUniversal3/744000132206379-manager-infrastructure-security-engineering", "externalId" : "744000132206379", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "remote", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood. NBCUniversal is a subsidiary of Comcast Corporation. Visit www.nbcuniversal.com for more information. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world. Join NBCUniversal Cyber Security and lead a team that designs, delivers, and operates enterprise cyber services that protect our employees, platforms, and businesses. This role is accountable for reliable, scalable security capabilities across the NBCU cyber infrastructure portfolio, partnering with stakeholders to reduce risk while enabling innovation and speed. As an Engineering Manager within Enterprise Cyber Services, you will provide technical and people leadership across the NBCU cyber infrastructure portfolio—including, network/security perimeter services, endpoint and server protection, security tooling and automation, vulnerability and configuration management, cyber platform secrets and key management, and cloud security enablement. You will also drive standard telemetry patterns and integrations with the enterprise SIEM (e.g., log onboarding governance, normalization/parsing, and alert/detection partnership) to ensure security services and platforms produce high-quality, actionable signals. You will partner with service leads to drive roadmap execution, service reliability, operational excellence, and continuous improvement while building strong partnerships with Security Operations, Architecture, Infrastructure, and product teams across the enterprise. Responsibilities : * Lead and develop a team of engineers responsible for building and operating enterprise cyber services; establish clear goals, provide coaching and feedback, and support career growth. * Own service delivery and contribute to multi-quarter roadmap across the cyber infrastructure portfolio pillars (e.g., network security services, endpoint/server security, vulnerability management, logging, telemetry, and SIEM integration, automation, secrets/key management, and cloud security enablement), aligning priorities to business needs and risk reduction. * Drive secure-by-design engineering practices, reference architectures, and standard patterns for onboarding new platforms and business entities, ensuring consistent control implementation and data quality across NBCUniversal. * Accountable for reliability, performance, and lifecycle management of cyber services, including capacity planning, patching, upgrades, vendor engagement, and cost management. * Establish and maintain operational excellence: SLAs/SLOs, service health metrics, runbooks, incident response playbooks, problem management, and post-incident reviews with measurable corrective actions. * Partner with Security Operations and Threat teams on logging, telemetry, and SIEM integration to ensure detections are effective, prioritized, and continuously improved (e.g., log onboarding/integration, parsing/normalization, correlation, alert tuning). * Collaborate cross-functionally with Architecture, Infrastructure, Cloud, and Application teams to plan and deliver integrations, migrations, and new capabilities; translate requirements into actionable engineering work. * Implement governance for security service onboarding and change management, including intake processes, technical reviews, documentation standards, and audit-ready evidence (in partnership with Risk/Compliance where applicable). * Champion automation and Infrastructure-as-Code to improve consistency and speed of delivery (CI/CD, configuration management, and policy-as-code) across cyber infrastructure services. * Manage on-call and escalation processes for critical services, ensuring effective coverage, clear communications, and continuous reduction of operational toil. ## Qualifications Basic Requirements : * 7+ years of experience in cybersecurity engineering, infrastructure/platform engineering, SRE/DevOps, or related fields. * 2+ years of engineering leadership experience (people management or technical/team leadership), including coaching, prioritization, and delivering outcomes through others. * Bachelor’s Degree in Computer Science, Engineering, or equivalent experience. * Demonstrated knowledge in defense-in-depth, zero trust, segmentation, least privilege, and service hardening. * Highly collaborative and able to work across teams; strong problem-solving and analytical skills. * Demonstrated experience operating production services: SLOs/SLAs, incident/problem/change management, runbooks, post-incident reviews, and measurable reliability improvements. Desired Characteristics : Domain Expertise (Cyber Infrastructure): * Network and security perimeter services: DNS, TLS, WAF, proxies, firewalls, VPN/remote access, load balancing, and secure connectivity patterns. * Endpoint and server security: EDR concepts, OS hardening baselines, patching and vulnerability remediation workflows, and configuration compliance. * Logging, telemetry, and SIEM integration: observability tools (Datadog or similar), log source onboarding/integration, normalization/parsing, data quality, retention, correlation, and alert tuning; ability to partner with the SIEM platform and detection engineering teams to deliver actionable telemetry. * Security tooling and automation: building integrations and workflows via APIs, event-driven automation, and CI/CD enablement to reduce operational toil and standardize control implementation. * Vulnerability and configuration management: asset inventory concepts, scan coverage, exception/risk acceptance, remediation SLAs, and reporting. * Secrets and key management: KMS/HSM concepts, certificate lifecycle, rotation, break-glass access, and integrating secrets into CI/CD and runtime. * Cloud security enablement: partner with Cloud Security service team to ensure infrastructure services are supported with cloud deployment in mind. Platforms & Engineering Practices: * Operating systems : Strong Linux administration; working knowledge of Windows Server for enterprise integrations. * Cloud : AWS or Azure (networking, IAM, logging, and KMS), including hybrid connectivity patterns. * Infrastructure as Code : Terraform or CloudFormation/ARM/Bicep; policy-as-code where applicable. * CI/CD and source control : Git-based workflows; pipelines such as GitHub Actions, Jenkins, or AWS CodePipeline; and secrets handling in pipelines. * Automation and scripting : Python and Bash (or equivalent) for service automation, integrations, and data processing. * Logging and SIEM platforms : Splunk (or equivalent SIEM): log onboarding/integration, source troubleshooting, parsing/normalization, and collaboration with the SIEM platform team; log forwarders/pipelines such as Vector/Logstash and streaming via Kafka (or equivalent). * Containers and orchestration : Docker and Kubernetes, including secure configuration and runtime considerations. * Vulnerability and configuration tooling : Experience operating vulnerability scanning and configuration compliance tools (vendor-specific acceptable), plus remediation workflow tracking. * Secrets and key management tooling : Enterprise secrets manager and KMS/HSM integration experience (vendor-specific acceptable). * Observability : Service health monitoring, metrics, and dashboards (Datadog or similar) to support SLOs and incident response. Additional Requirements: * Fully Remote : This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence. This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $125,000 - $150,000 (bonus eligible) We are accepting applications for this position on an ongoing basis. ## Additional Information As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing AccessibilitySupport@nbcuni.com. For LA County and City Residents Only: NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.", "summaryDescription" : "Manager, Infrastructure Security Engineering at NBCUniversal", "postedDate" : "2026-06-15T13:43:43.000", "createdAt" : "2026-06-16T00:09:42.198", "lastUpdated" : "2026-06-16T12:04:32.119", "ingestTimestamp" : "2026-06-16T00:09:42.198", "mongoId" : "6a306afff292fd229cfceb65", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 245000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.98 }, { "id" : "6a304ff3f292fd229ceeb336", "title" : "Manager, Infrastructure Security Engineering", "company" : "NBCUniversal", "industry" : "Entertainment", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Manager, Infrastructure Security Engineering in New York, NY, adjusted for the media industry and full-time employment." }, "location" : "New York, NEW YORK, United States", "locations" : [ "New York", "NEW YORK", "United States" ], "timestamp" : "2026-06-16T05:01:41.966", "fingerprint" : "3dd52168e3355643a7c3651d9235e02488a3627469faa9d817808ac4ed42c85b", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/NBCUniversal3/744000132206379-manager-infrastructure-security-engineering", "externalId" : "744000132206379", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "remote", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood. NBCUniversal is a subsidiary of Comcast Corporation. Visit www.nbcuniversal.com for more information. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world. Join NBCUniversal Cyber Security and lead a team that designs, delivers, and operates enterprise cyber services that protect our employees, platforms, and businesses. This role is accountable for reliable, scalable security capabilities across the NBCU cyber infrastructure portfolio, partnering with stakeholders to reduce risk while enabling innovation and speed. As an Engineering Manager within Enterprise Cyber Services, you will provide technical and people leadership across the NBCU cyber infrastructure portfolio—including, network/security perimeter services, endpoint and server protection, security tooling and automation, vulnerability and configuration management, cyber platform secrets and key management, and cloud security enablement. You will also drive standard telemetry patterns and integrations with the enterprise SIEM (e.g., log onboarding governance, normalization/parsing, and alert/detection partnership) to ensure security services and platforms produce high-quality, actionable signals. You will partner with service leads to drive roadmap execution, service reliability, operational excellence, and continuous improvement while building strong partnerships with Security Operations, Architecture, Infrastructure, and product teams across the enterprise. Responsibilities : * Lead and develop a team of engineers responsible for building and operating enterprise cyber services; establish clear goals, provide coaching and feedback, and support career growth. * Own service delivery and contribute to multi-quarter roadmap across the cyber infrastructure portfolio pillars (e.g., network security services, endpoint/server security, vulnerability management, logging, telemetry, and SIEM integration, automation, secrets/key management, and cloud security enablement), aligning priorities to business needs and risk reduction. * Drive secure-by-design engineering practices, reference architectures, and standard patterns for onboarding new platforms and business entities, ensuring consistent control implementation and data quality across NBCUniversal. * Accountable for reliability, performance, and lifecycle management of cyber services, including capacity planning, patching, upgrades, vendor engagement, and cost management. * Establish and maintain operational excellence: SLAs/SLOs, service health metrics, runbooks, incident response playbooks, problem management, and post-incident reviews with measurable corrective actions. * Partner with Security Operations and Threat teams on logging, telemetry, and SIEM integration to ensure detections are effective, prioritized, and continuously improved (e.g., log onboarding/integration, parsing/normalization, correlation, alert tuning). * Collaborate cross-functionally with Architecture, Infrastructure, Cloud, and Application teams to plan and deliver integrations, migrations, and new capabilities; translate requirements into actionable engineering work. * Implement governance for security service onboarding and change management, including intake processes, technical reviews, documentation standards, and audit-ready evidence (in partnership with Risk/Compliance where applicable). * Champion automation and Infrastructure-as-Code to improve consistency and speed of delivery (CI/CD, configuration management, and policy-as-code) across cyber infrastructure services. * Manage on-call and escalation processes for critical services, ensuring effective coverage, clear communications, and continuous reduction of operational toil. ## Qualifications Basic Requirements : * 7+ years of experience in cybersecurity engineering, infrastructure/platform engineering, SRE/DevOps, or related fields. * 2+ years of engineering leadership experience (people management or technical/team leadership), including coaching, prioritization, and delivering outcomes through others. * Bachelor’s Degree in Computer Science, Engineering, or equivalent experience. * Demonstrated knowledge in defense-in-depth, zero trust, segmentation, least privilege, and service hardening. * Highly collaborative and able to work across teams; strong problem-solving and analytical skills. * Demonstrated experience operating production services: SLOs/SLAs, incident/problem/change management, runbooks, post-incident reviews, and measurable reliability improvements. Desired Characteristics : Domain Expertise (Cyber Infrastructure): * Network and security perimeter services: DNS, TLS, WAF, proxies, firewalls, VPN/remote access, load balancing, and secure connectivity patterns. * Endpoint and server security: EDR concepts, OS hardening baselines, patching and vulnerability remediation workflows, and configuration compliance. * Logging, telemetry, and SIEM integration: observability tools (Datadog or similar), log source onboarding/integration, normalization/parsing, data quality, retention, correlation, and alert tuning; ability to partner with the SIEM platform and detection engineering teams to deliver actionable telemetry. * Security tooling and automation: building integrations and workflows via APIs, event-driven automation, and CI/CD enablement to reduce operational toil and standardize control implementation. * Vulnerability and configuration management: asset inventory concepts, scan coverage, exception/risk acceptance, remediation SLAs, and reporting. * Secrets and key management: KMS/HSM concepts, certificate lifecycle, rotation, break-glass access, and integrating secrets into CI/CD and runtime. * Cloud security enablement: partner with Cloud Security service team to ensure infrastructure services are supported with cloud deployment in mind. Platforms & Engineering Practices: * Operating systems : Strong Linux administration; working knowledge of Windows Server for enterprise integrations. * Cloud : AWS or Azure (networking, IAM, logging, and KMS), including hybrid connectivity patterns. * Infrastructure as Code : Terraform or CloudFormation/ARM/Bicep; policy-as-code where applicable. * CI/CD and source control : Git-based workflows; pipelines such as GitHub Actions, Jenkins, or AWS CodePipeline; and secrets handling in pipelines. * Automation and scripting : Python and Bash (or equivalent) for service automation, integrations, and data processing. * Logging and SIEM platforms : Splunk (or equivalent SIEM): log onboarding/integration, source troubleshooting, parsing/normalization, and collaboration with the SIEM platform team; log forwarders/pipelines such as Vector/Logstash and streaming via Kafka (or equivalent). * Containers and orchestration : Docker and Kubernetes, including secure configuration and runtime considerations. * Vulnerability and configuration tooling : Experience operating vulnerability scanning and configuration compliance tools (vendor-specific acceptable), plus remediation workflow tracking. * Secrets and key management tooling : Enterprise secrets manager and KMS/HSM integration experience (vendor-specific acceptable). * Observability : Service health monitoring, metrics, and dashboards (Datadog or similar) to support SLOs and incident response. Additional Requirements: * Fully Remote : This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence. This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $125,000 - $150,000 (bonus eligible) We are accepting applications for this position on an ongoing basis. ## Additional Information As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing AccessibilitySupport@nbcuni.com. For LA County and City Residents Only: NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.", "summaryDescription" : "Manager, Infrastructure Security Engineering at NBCUniversal", "postedDate" : "2026-06-15T13:43:43.000", "createdAt" : "2026-06-15T21:39:07.512", "lastUpdated" : "2026-06-16T05:01:41.966", "ingestTimestamp" : "2026-06-15T21:39:07.512", "mongoId" : "6a304ff3f292fd229ceeb336", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 245000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.98 }, { "id" : "69d5e4972beec4dd3d931a94", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T01:59:48.176", "fingerprint" : "0ec424e9d2b35a133660b95692851a41677cd191ce06dcc34f0740d1755687ea", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10384824/apply", "externalId" : "07995b8f-98eb-495e-8b78-1e1267149e43", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software development, Automation, AWS services", "majorSkillsList" : [ "Security software development", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network environment; Security response", "domainList" : [ "aws-security", "corporate-network-environment", "security-response" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network environment", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Impact engineer productivity; Enhance productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software development, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T02:52:31.356", "createdAt" : "2026-06-13T02:52:31.356", "lastUpdated" : "2026-06-15T01:59:48.176", "ingestTimestamp" : "2026-06-13T02:52:31.356", "mongoId" : "69d5e4972beec4dd3d931a94", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10384824/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software development", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network environment" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c751574d8ee00a09360f7", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T03:29:01.550", "fingerprint" : "a9b58b622fae2a5e015d888ceb1430e0f4c7af9bae19294b10f2e0362b229c6e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, Data lakes, EDR, Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management" ], "hardSkillsList" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Incident containment", "level" : "intermediate" }, { "name" : "Incident remediation", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response planning", "level" : "intermediate" }, { "name" : "On-call management", "level" : "intermediate" }, { "name" : "Escalation paths", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Adversary tradecraft", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire for functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Ensure critical telemetry is available, Ensure critical telemetry is reliable, Ensure critical telemetry is actionable, Embed detection and response by design, Build a security program, Use Serval's agents for security problems, Use Serval's agents for security-operations problems", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure; Work with stakeholders", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments; AI-native automation", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments", "ai-native-automation" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "communicationSkills" : "Written communication; Verbal communication; Incident communication", "innovationCreativity" : "Solve frontier security problems; Solve frontier security-operations problems", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Scale detection and response operations; Improve response quality; Improve response speed", "qualificationsBasic" : "10+ years in cybersecurity, Deep expertise in detection engineering, Deep expertise in incident response, Deep expertise in security operations, Deep experience building detection and response teams, Deep experience building instrumentation/observability teams, Deep experience building threat intelligence teams, Stellar leadership skills, Demonstrated history of driving improvements, Exceptional written communication skills, Exceptional verbal communication skills, Remain calm under pressure, Effectively run command of security incidents, Deep expertise in modern observability stacks, Deep expertise in SIEM, Deep expertise in data lakes, Deep expertise in EDR, Deep expertise in cloud telemetry, Deep expertise in logging, Deep expertise in detection primitives, Understand modern adversary tradecraft (TTPs), Demonstrated experience translating TTPs into detection strategies, Demonstrated experience translating TTPs into response actions, Mission-oriented, Unimpeachable integrity, Passionate about detecting and responding to adversaries", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T19:27:55.217", "lastUpdated" : "2026-06-16T03:29:01.550", "ingestTimestamp" : "2026-06-14T19:27:55.217", "mongoId" : "6a2c751574d8ee00a09360f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145374d8ee00a00bb39c", "title" : "Manager, Security Engineering", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 100000.0, "max" : 236900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "Information security professional certification" ], "timestamp" : "2026-06-15T03:07:53.332", "fingerprint" : "728024db810732b0c76a9017e252911472c905362ce81032019d6919913c5b28", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441417/apply", "externalId" : "7bd9fe5f-7ae2-4213-8ecc-12441593625b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Web services, Cryptography, Network security", "professionalSkills" : [ "People leadership", "Security expertise", "Risk assessment", "Security architecture reviews" ], "hardSkillsList" : [ "Threat modeling", "Security architecture reviews", "Risk assessments", "Security guidance", "Runbooks", "Documentation" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Security architecture reviews", "level" : "intermediate" }, { "name" : "Risk assessments", "level" : "intermediate" }, { "name" : "Security guidance", "level" : "intermediate" }, { "name" : "Runbooks", "level" : "intermediate" }, { "name" : "Documentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security Engineering, People leadership, Third-party security", "majorSkillsList" : [ "Security Engineering", "People leadership", "Third-party security" ], "coreResponsibilities" : "Lead security engineers, Define third-party security controls, Enforce third-party security controls, Set security vision, Set security strategy, Define security controls to prioritize, Evolve security controls, Integrate security controls, Translate security requirements, Shape product roadmaps, Shape feature priorities, Drive feedback loop, Improve assessment precision, Conduct threat modeling, Conduct security architecture reviews, Conduct risk assessments, Develop security guidance, Maintain security guidance, Develop runbooks, Maintain runbooks, Develop documentation, Maintain documentation, Author documents for leadership, Communicate security risks, Communicate resource needs, Communicate strategic priorities, Build operational excellence mechanisms, Track team capacity, Track review throughput, Track quality metrics, Track backlog health", "teamCollaboration" : "Partner with Product; Partner with Software Engineering; Partner with Applied Science", "domainKnowledge" : "Third-party security; Security controls; Assessment automation; Web services security; Video content protection; Network security protocols; Operating system security", "domainList" : [ "third-party-security", "security-controls", "assessment-automation", "web-services-security", "video-content-protection", "network-security-protocols", "operating-system-security" ], "domainSpecificKnowledge" : [ "Third-party security", "Security controls", "Assessment automation", "Web services security", "Video content protection", "Network security protocols", "Operating system security" ], "communicationSkills" : "Executive presentations", "documentationSkills" : "Technical writing", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5+ years managing teams, 5+ years software security experience, Bachelor's degree in Computer Science, Knowledge of web services security, Knowledge of video content protection, Knowledge of cryptography, Knowledge of network security protocols, Knowledge of operating system security, Experience applying threat modeling, Experience applying risk identification techniques", "qualificationsPreferred" : "Information security professional certification, Master's degree in Computer Science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We're looking for an experienced Security Engineering Manager to join our Secure Third Party Tools team. Our team builds the standards, controls, and expert review processes that ensure external vendors, software providers, and services meet Amazon's security bar before they interact with our data or systems. In this role, you'll manage a team of Security Engineers who define and maintain the security controls that 3P are assessed against, conduct expert security reviews for complex engagements, and provide continuous feedback that improves the accuracy of our assessment automation. You'll be responsible for both the technical quality of your team's output and the professional growth of your team. This is a role where security expertise meets people leadership. You'll set direction for your team while partnering closely with Product, Software Engineering and Applied Science, to ensure that security standards are effectively translated into scalable, automated tooling. Your team's work directly determines whether Amazon can move fast with 3P while maintaining the highest security standards. Key job responsibilities - Lead a team of Security Engineers who define and enforce Amazon's third-party security controls. - Set the security vision and strategy for your team's domain—defining which security controls to prioritize, how to evolve them against emerging threats, and how to integrate them into automated assessment systems. - Partner with Product and Engineering to translate security requirements into tool capabilities, providing subject-matter expertise that shapes product roadmaps and feature priorities. - Drive the feedback loop between manual expert reviews and automated assessment outputs, continuously improving precision and reducing the need for human intervention. - Conduct threat modeling, security architecture reviews, and risk assessments for complex or novel third-party integrations. - Develop and maintain security guidance, runbooks, and documentation for internal teams and third-party vendors. - Author documents for leadership reviews, communicating security risks, resource needs, and strategic priorities clearly and concisely. - Build mechanisms for operational excellence—tracking team capacity, review throughput, quality metrics, and backlog health. About the team About Amazon Security Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 5+ years of managing and developing teams experience - 5+ years of progressive work within a software security team or related operating environment experience - Bachelor's degree in Computer Science, Information Security, or a related field - Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security - Experience applying threat modeling or other risk identification techniques or equivalent Preferred Qualifications: - information security professional certification (SANS GIAC, CISSP etc.) - Master's degree in Computer Science or a related field - Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 175,100.00 - 236,900.00 USD annually", "summaryDescription" : "Manager, Security Engineering at Amazon.com Services LLC. Skills: Security Engineering, People leadership, Third-party security. Lead security engineers. Define third-party security controls", "postedDate" : "2026-06-13T04:35:32.791", "createdAt" : "2026-06-13T04:35:32.791", "lastUpdated" : "2026-06-15T03:07:53.332", "ingestTimestamp" : "2026-06-13T04:35:32.791", "mongoId" : "6a25145374d8ee00a00bb39c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441417/apply", "salaryAnnualMin" : 100000, "salaryAnnualMax" : 236900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Threat modeling", "Security architecture reviews", "Risk assessments", "Security guidance", "Runbooks", "Documentation", "Leadership", "Security Engineering", "People leadership", "Third-party security", "Security expertise", "Risk assessment", "Security controls", "Assessment automation", "Web services security", "Video content protection", "Network security protocols", "Operating system security", "Information security professional certification" ], "skillCount" : 19, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c68fa74d8ee00a09057f9", "title" : "Assistant Manager, Cybersecurity Incident Response", "company" : "telecommunications organization", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager-level Cybersecurity Incident Response Assistant Manager in Kuala Lumpur, Malaysia, adjusted for the telecommunications industry." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "certifications" : [ "CISSP", "GCIH", "GCIA", "CEH", "Elastic Certified Engineer" ], "timestamp" : "2026-06-15T07:44:00.220", "fingerprint" : "56e79a26aaf2e95b5e453b798552e77ada7580d02d519917696520bc1ab763d7", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f736808f-ea19-4fe2-8933-8ca7e3e0efd4/application", "externalId" : "f736808f-ea19-4fe2-8933-8ca7e3e0efd4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 8, "experienceLevel" : "Manager", "technicalSkills" : "Elastic SIEM, Elastic Stack, Elasticsearch, Logstash, Kibana, Beats, EDR, Cloud platforms", "professionalSkills" : [ "Incident management", "Detection engineering", "Use case development", "Stakeholder coordination", "Incident reporting", "Operational excellence", "Threat detection", "Root cause analysis", "Lessons learned" ], "hardSkillsList" : [ "Log analysis", "Event correlation", "Rule creation", "Rule tuning", "Integration efforts" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Event correlation", "level" : "intermediate" }, { "name" : "Rule creation", "level" : "intermediate" }, { "name" : "Rule tuning", "level" : "intermediate" }, { "name" : "Integration efforts", "level" : "intermediate" } ], "majorSkills" : "Incident Response, SIEM administration, Detection Engineering", "majorSkillsList" : [ "Incident Response", "SIEM administration", "Detection Engineering" ], "coreResponsibilities" : "Manage cybersecurity incidents, Achieve MTTD benchmarks, Achieve MTTR benchmarks, Administer Elastic SIEM platform, Create detection rules, Tune detection rules, Integrate SIEM, Develop detection use cases, Escalate incidents, Coordinate with stakeholders, Report incidents, Monitor alerts, Triage alerts, Investigate alerts, Refine SIEM rules, Manage Elastic Stack components, Lead integration efforts, Collaborate with IT teams, Collaborate with Network teams, Collaborate with Cloud teams, Present incident findings, Present root cause analyses, Present remediation plans, Document playbooks, Enhance SOPs, Conduct post-incident reviews, Implement lessons learned", "teamCollaboration" : "Internal stakeholders; External stakeholders; Data Engineering teams; Architecture teams; Security teams; Infrastructure teams; Tooling teams; IT teams; Network teams; Cloud teams", "domainKnowledge" : "Cybersecurity incidents; Threat patterns; Attack patterns; MITRE ATT&CK", "domainList" : [ "cybersecurity-incidents", "threat-patterns", "attack-patterns", "mitre-att-ck" ], "domainSpecificKnowledge" : [ "Cybersecurity incidents", "Threat patterns", "Attack patterns", "MITRE ATT&CK" ], "toolProficiency" : [ "Elastic SIEM", "Elastic Stack", "EDR", "Ticketing systems" ], "communicationSkills" : "Incident reporting; Incident discussions", "documentationSkills" : "Incident response playbooks; Standard operating procedures", "problemSolvingSkills" : "Incident investigation; Log analysis; Event correlation; Root cause analysis", "outcomesObjectives" : "Achieve MTTD benchmarks; Achieve MTTR benchmarks; Strengthen security posture", "qualificationsBasic" : "5-8 years experience, SIEM administration, Elastic Stack environments, Incident triage, Log analysis, Detection rule engineering, MITRE ATT&CK-aligned use cases, Cross-department collaboration, Incident coordination, Presentation experience, Communication experience", "qualificationsPreferred" : "CISSP, GCIH, GCIA, CEH, Elastic Certified Engineer", "remoteFriendly" : true, "rawDescription" : "We are currently partnering with a leading technology-driven telecommunications organization that is scaling rapidly to support new digital initiatives and platforms. As part of this expansion, multiple roles are open across key functions to help build, maintain, and enhance next-generation solutions. This opportunity offers exposure to large-scale systems, innovative technologies, and a collaborative environment where skills and ideas make a real impact. Accountabilities: - End-to-end management of cybersecurity incidents, ensuring timely detection, triage, investigation, and resolution - Achieving and maintaining target MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond) benchmarks. - Effective administration and optimization of the Elastic SIEM platform, including rule creation, tuning, and integrations. - Development of accurate and relevant detection use cases aligned with evolving threat patterns and organizational needs. - Ensuring timely escalation and coordination with internal and external stakeholders during major incidents. - Providing transparent and comprehensive incident reporting to leadership and relevant teams. - Drive operational excellence through monitoring, alerting, timely investigation and continuous fine tuning the alerts - Partner with Data Engineering, Architecture, Security, Infrastructure & Tooling teams to ensure aligned technical cyber security discussions Responsibilities: - Monitor, triage, and investigate alerts from multiple log sources (network, endpoint, cloud, and application). - Create, refine, and manage SIEM detection rules to capture the latest attack patterns. - Conduct log analysis and event correlation to identify potential intrusions or malicious behavior. - Drive use case ideation and validation to improve threat detection coverage and accuracy. - Manage and maintain Elastic Stack components (Elasticsearch, Logstash, Kibana, Beats) for operational efficiency. - Lead integration efforts with tools such as EDR, firewalls, cloud platforms, and ticketing systems. - Collaborate with IT, Network, and Cloud teams for incident follow-up, containment, and recovery. - Present incident findings, root cause analyses, and remediation plans to key stakeholders (internal leadership and external partners). - Document and enhance incident response playbooks and standard operating procedures (SOPs). - Conduct post-incident reviews and implement lessons learned to strengthen the organization's security posture. Requirements - 5-8 years of experience in Security Operations Center (SOC), Incident Response, or Detection Engineering roles. - Proven success in SIEM administration, particularly Elastic Stack (ELK) environments. - Hands-on expertise in incident triage, log analysis, and detection rule engineering. - Demonstrated ability to design and operationalize MITRE ATT&CK-aligned use cases. - Experience in cross-department collaboration and incident coordination with IT and business teams. - Strong presentation and communication experience in stakeholder-level incident discussions. - Relevant certifications such as CISSP,GCIH, GCIA, CEH, or Elastic Certified Engineer preferred.", "summaryDescription" : "Assistant Manager, Cybersecurity Incident Response at telecommunications organization. Skills: Incident Response, SIEM administration, Detection Engineering. Manage cybersecurity incidents. Achieve MTTD benchmarks", "createdAt" : "2026-06-13T22:02:53.611", "lastUpdated" : "2026-06-15T07:44:00.220", "ingestTimestamp" : "2026-06-13T22:02:53.611", "mongoId" : "6a2c68fa74d8ee00a09057f9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Log analysis", "Event correlation", "Rule creation", "Rule tuning", "Integration efforts", "Incident Response", "SIEM administration", "Detection Engineering", "Incident management", "Detection engineering", "Use case development", "Stakeholder coordination", "Incident reporting", "Operational excellence", "Threat detection", "Root cause analysis", "Lessons learned", "Cybersecurity incidents", "Threat patterns", "Attack patterns", "MITRE ATT&CK", "CISSP", "GCIH", "GCIA", "CEH", "Elastic Certified Engineer", "Elastic SIEM", "Elastic Stack", "EDR", "Ticketing systems" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a210e7574d8ee00a0af7a30", "title" : "Senior Security Engineer, Product Security Engineering", "salary" : { "min" : 175000.0, "max" : 250000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in New York, adjusted for the technology industry and senior experience level." }, "location" : "[New York, NY, USA, [New York, NY, USA], New York, null, NY, US]", "locations" : [ "[New York, NY, USA, [New York, NY, USA], New York, null, NY, US]", "[Kirkland, WA, USA, [Kirkland, WA, USA], Kirkland, null, WA, US]", "[Raleigh, NC, USA, [Raleigh, NC, USA], Raleigh, null, NC, US]", "[Durham, NC, USA, [Durham, NC, USA], Durham, null, NC, US]" ], "timestamp" : "2026-06-16T11:56:33.166", "fingerprint" : "0d73fc062b9b4b9b1faa51969c56ca2722fd815ba4c2461da60702755e30245c", "source" : "google", "language" : "en", "externalId" : "74298926970086086", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "summaryDescription" : "Senior Security Engineer, Product Security Engineering", "postedDate" : "2026-06-16T01:51:22.395", "createdAt" : "2026-06-16T01:51:22.395", "lastUpdated" : "2026-06-16T11:56:33.166", "ingestTimestamp" : "2026-06-16T01:51:22.395", "mongoId" : "6a210e7574d8ee00a0af7a30", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 250000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2a7ffb74d8ee00a066c5ac", "title" : "Cybersecurity Manager (Incident Response & Security Operations)", "company" : "Match Group", "industry" : "Security", "salary" : { "min" : 170000.0, "max" : 190000.0, "currency" : "CAD", "frequency" : "yearly" }, "location" : "Vancouver, British Columbia", "locations" : [ "Vancouver, British Columbia" ], "certifications" : [ "GCIH", "GCFA", "GCIA", "GSOM", "CISSP" ], "timestamp" : "2026-06-15T00:05:27.519", "fingerprint" : "6dcc57fb7b8160bc9400f872d1609fde7a4e6117091effb646a4513f2120db6b", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/matchgroup/70690017-f01c-446e-93e5-eca0e8d8aba3/apply", "externalId" : "70690017-f01c-446e-93e5-eca0e8d8aba3", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS, GCP, Kubernetes, CrowdStrike, Okta, Python", "professionalSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing" ], "hardSkillsList" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Detection engineering framework", "level" : "intermediate" }, { "name" : "Detections-as-code", "level" : "intermediate" }, { "name" : "GitOps", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "SIEM platform", "level" : "intermediate" }, { "name" : "Log source integration", "level" : "intermediate" }, { "name" : "SOC metrics", "level" : "intermediate" }, { "name" : "SLAs", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Endpoint forensics", "level" : "intermediate" }, { "name" : "Network forensics", "level" : "intermediate" }, { "name" : "Threat hunting techniques", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Datacenter security", "level" : "intermediate" }, { "name" : "Container orchestration security", "level" : "intermediate" }, { "name" : "Access security monitoring", "level" : "intermediate" }, { "name" : "Threat intelligence workflows", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response, Security Operations, Detection Engineering, AI-augmented SOC", "majorSkillsList" : [ "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC" ], "coreResponsibilities" : "Lead integrated team, Drive strategic vision, Maximize threat response capabilities, Integrate core functions, Leverage AI innovation, Own detection lifecycle, Build AI-augmented SOC model, Develop high-performing team, Operate across time zones, Provide 24/7 coverage, Develop detection engineering framework, Contribute to detections-as-code, Drive AI Agentic SOC adoption, Evaluate AI tooling, Select AI tooling, Implement AI tooling, Manage full incident lifecycle, Partner with Legal, Partner with Communications, Partner with Privacy, Partner with Engineering, Build detection content, Integrate log sources, Establish SOC metrics, Track SOC metrics, Establish SOC SLAs, Track SOC SLAs, Create dashboards, Visualize performance, Visualize alert fidelity, Visualize response effectiveness, Coordinate IR tabletop exercises, Execute IR tabletop exercises, Validate readiness, Improve playbooks, Partner with Red Team, Validate detection capabilities, Collaborate with Platform Security, Collaborate with InfraSec, Collaborate with AppSec, Identify detection gaps, Close detection gaps, Integrate threat intelligence, Anticipate emerging threats, Proactively defend threats, Use automation, Improve detection times, Improve response times, Mitigate incident impact", "teamCollaboration" : "Cross-functional stakeholders; External incident response teams; Law enforcement; Platform Security teams; InfraSec teams; AppSec teams; Legal teams; Communications teams; Privacy teams; Engineering teams; Red Team", "projectManagementSkills" : [ "Detections-as-code", "GitOps", "CI/CD pipelines" ], "domainKnowledge" : "Attacker TTPs; MITRE ATT&CK; Cloud-native environments; Hybrid environments; Datacenter infrastructure; Endpoint security; Network security; Identity and access security; SaaS security; Application security; Threat intelligence", "domainList" : [ "attacker-ttps", "mitre-att-ck", "cloud-native-environments", "hybrid-environments", "datacenter-infrastructure", "endpoint-security", "network-security", "identity-and-access-security", "saas-security", "application-security", "threat-intelligence" ], "domainSpecificKnowledge" : [ "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence" ], "toolProficiency" : [ "SIEM", "SOAR", "Git", "GitOps", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "communicationSkills" : "Verbal communication; Written communication; Post-incident reports", "continuousLearning" : "Annual training allowance", "innovationCreativity" : "AI-driven innovation; AI-augmented SOC model; AI Agentic SOC adoption", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Alert tuning; Investigation; Incident resolution", "specialRequirements" : "24/7 coverage", "outcomesObjectives" : "Maximize rapid threat response; Maximize accurate threat response; Reduce noise; Accelerate response; Scale across portfolio; Reduce false positives; Accelerate initial response speed; Validate detection capabilities; Improve playbooks; Close detection gaps; Improve detection times; Improve response times; Mitigate incident impact", "qualificationsBasic" : "5+ years security operations, 5+ years incident response, 5+ years detection engineering, 5+ years threat hunting, 2+ years team leadership, 2+ years management role, Build and operate modern SOC, Experience with SIEM platforms, Experience with SOAR tools, Understanding AI/ML applications, Manage full incident lifecycle, Experience with cloud security monitoring, Experience with datacenter security, Experience with container orchestration security, Familiarity with identity access security monitoring, Experience coordinating external IR teams, Experience coordinating with law enforcement, Experience coordinating with cross-functional stakeholders, Polished verbal communication skills, Polished written communication skills", "qualificationsPreferred" : "Python-based detections experience, Log analysis experience, Background consumer internet industry, Background dating industry, Background high-scale B2C platforms, Cloudflare experience, CrowdStrike experience, SaaS security monitoring experience, Obsidian experience, Experience building Blue Team program, Experience leading Blue Team program, Experience building cross-functional security team, Experience leading cross-functional security team", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## About the Role As the Manager, IR / SOC, you will lead the integrated team responsible for Detection Engineering, Security Operations Center (SOC), and Incident Response (IR) across Match Group. Reporting to the Sr. Director of Security Engineering, you will drive the strategic vision of maximizing rapid and accurate threat response capabilities by integrating these three core functions and leveraging AI-driven innovation. You will own the detection lifecycle end-to-end — from signal engineering and alert tuning through triage, investigation, and incident resolution — while building toward an AI-augmented SOC model that reduces noise, accelerates response, and scales across a global portfolio. ## What You'll Do Lead and develop a high-performing team of SOC analysts, detection engineers, and incident responders operating across multiple time zones with 24/7 coverage Play a key role in developing the detection engineering framework, contributing to detections-as-code (DaC) via GitOps/CI/CD pipelines for consistency and automated deployment Drive AI Agentic SOC adoption — evaluate, select, and implement AI-driven triage and investigation tooling to maximize SOC efficiency, reduce false positives, and accelerate initial response speed Manage the full incident lifecycle — from detection through containment, eradication, recovery, and lessons learned — partnering with Legal, Communications, Privacy, and Engineering teams Build and refine detection content across the SIEM platform, integrating log sources across all MG brands (Tinder, Hinge, Match, E&E, HPCNT, Eureka, and New Bets) Establish and track SOC metrics and SLAs, creating dashboards to visualize performance, alert fidelity, and response effectiveness Coordinate and execute IR tabletop exercises (technical and management-level) across brands to validate readiness and improve playbooks Partner with the Red Team to validate detection capabilities through adversary simulation and assumed-compromise testing Collaborate with Platform Security, InfraSec, and AppSec teams to identify and close detection gaps across cloud-native and hybrid environments (AWS, GCP), datacenter infrastructure, endpoints (CrowdStrike), identity (Okta), SaaS, and application layers Integrate threat intelligence into detection and response workflows to anticipate and proactively defend against emerging threats Use automation to improve detection and response times and mitigate incident impact ## What You'll Bring 5+ years of experience in security operations, incident response, detection engineering, or threat hunting, with 2+ years in a team leadership or management role Proven experience building and operating a modern SOC in cloud-native and hybrid environments (AWS, GCP) and datacenter infrastructure Hands-on experience with SIEM platforms and SOAR tools — including detection-as-code methodologies Strong understanding of AI/ML applications in security operations — agentic SOC, automated triage, and intelligent alert enrichment Experience managing the full incident lifecycle across complex, multi-brand or multi-tenant environments Deep knowledge of attacker TTPs (MITRE ATT&CK), endpoint and network forensics, and threat hunting techniques Experience with cloud security monitoring (AWS CloudTrail, GuardDuty, Security Hub, CloudWatch; GCP Security Command Center), datacenter security, and container orchestration security (Kubernetes) Familiarity with identity and access security monitoring (Okta, SSO, MFA events) Experience coordinating with external incident response teams, law enforcement, and cross-functional stakeholders during security events Polished verbal and written communication skills — ability to communicate clearly during high-pressure incidents and deliver thorough post-incident reports to technical and executive audiences Relevant certifications are a plus: GCIH, GCFA, GCIA, GSOM, CISSP, or equivalent ## Nice to Have Experience with Python-based detections and log analysis in modern cloud-native SIEM platforms Background in the consumer internet/dating industry or other high-scale B2C platforms Familiarity with Cloudflare (WAF, Bot Management), CrowdStrike, and SaaS security monitoring (Obsidian or similar) Experience building or leading a Blue Team volunteer program or cross-functional security response team ## Additional Information Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer: Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security Unplug – Generous PTO and 14 paid holidays so you can unplug Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging! We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage. #MG", "summaryDescription" : "Cybersecurity Manager (Incident Response & Security Operations) at Match Group. Skills: Incident Response, Security Operations, Detection Engineering, AI-augmented SOC. Lead integrated team. Drive strategic vision", "postedDate" : "2026-06-10T16:28:32.723", "createdAt" : "2026-06-10T16:28:32.723", "lastUpdated" : "2026-06-15T00:05:27.519", "ingestTimestamp" : "2026-06-12T07:31:26.388", "mongoId" : "6a2a7ffb74d8ee00a066c5ac", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows", "Leadership", "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC", "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing", "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence", "GCIH", "GCFA", "GCIA", "GSOM", "CISSP", "SIEM", "SOAR", "Git", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "skillCount" : 58, "jobCategory" : "other", "dataQualityScore" : 1.0, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2cb0c074d8ee00a09daf1c", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T09:19:56.220", "fingerprint" : "14803e741daf8986e22ba67efd869ed1db5cb9f7c1f099fcc2a20c6ed18f6f72", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Threat intelligence", "Observability", "Program management" ], "hardSkillsList" : [ "Adversary tradecraft", "Detection strategies", "Response actions" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Adversary tradecraft", "level" : "intermediate" }, { "name" : "Detection strategies", "level" : "intermediate" }, { "name" : "Response actions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Partner with engineering teams, Ensure telemetry availability, Ensure telemetry reliability, Ensure telemetry actionability, Embed detection and response, Build security program", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "communicationSkills" : "Written communication; Verbal communication", "innovationCreativity" : "Use Serval's agents", "qualificationsBasic" : "10+ years cybersecurity, Deep expertise detection engineering, Deep expertise incident response, Deep expertise security operations, Deep experience building teams, Deep experience leading teams, Stellar leadership skills, Demonstrated history driving improvements, Exceptional written communication, Exceptional verbal communication, Remain calm under pressure, Effectively run incidents, Deep expertise observability stacks, Deep expertise detection primitives, Understand modern adversary tradecraft, Experience translating TTPs, Experience into detection strategies, Experience into response actions", "qualificationsPreferred" : "Experience with SIEM, Experience with data lakes, Experience with EDR, Experience with cloud telemetry, Experience with logging", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T03:16:25.185", "lastUpdated" : "2026-06-15T09:19:56.220", "ingestTimestamp" : "2026-06-14T03:16:25.185", "mongoId" : "6a2cb0c074d8ee00a09daf1c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Adversary tradecraft", "Detection strategies", "Response actions", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Threat intelligence", "Observability", "Program management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e43bf8b1b0376634c922", "title" : "Customer Incident Response Program Manager", "company" : "Amazon Information Service", "industry" : "Project/Program/Product Management--Non-Tech, Program Management, Cloud Computing", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Manager in the Technology industry in Shanghai, China, adjusted for company size and specific role." }, "location" : "Shanghai, CHN", "locations" : [ "Shanghai, CHN" ], "certifications" : [ "Program or Project Management Professional Certification", "AWS certifications" ], "timestamp" : "2026-06-15T04:15:54.586", "fingerprint" : "0bc8f5195ef5bedf99b540884b8f2e95e0d85ed791a728e672725e3c046681c4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071459/apply", "externalId" : "1259a4c9-cf3d-4dad-ac7f-ee57866350a4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Shanghai", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "31.2312707,121.4700152" } ], "locationText" : "Shanghai, China", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "AWS, Generative AI", "professionalSkills" : [ "Security assessment", "Controls design" ], "hardSkillsList" : [ "Incident response", "Security operations" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Program management, Security", "majorSkillsList" : [ "Incident response", "Program management", "Security" ], "coreResponsibilities" : "Manage a portfolio of critical security offerings, Manage a portfolio of critical security services, Build training programs for users, Deploy training programs for users, Brief customers on AWS CIRT, Brief customers on AWS Security Incident Response service, Prioritize risk for service teams, Prioritize risk for security teams, Prioritize risk for executive leadership, Collaborate with business teams, Collaborate with service teams, Understand security assessment scope, Confirm security assessment scope, Understand controls design, Confirm controls design", "teamCollaboration" : "Cross-functional teams; Senior leadership; Security engineers; Service teams", "projectManagementSkills" : [ "Program management", "Project management", "Roadmap management", "Strategic planning" ], "domainKnowledge" : "Cloud security; Incident response; Security operations", "domainList" : [ "cloud-security", "incident-response", "security-operations" ], "domainSpecificKnowledge" : [ "Cloud security", "Incident response", "Security operations" ], "communicationSkills" : "Executive level communication", "innovationCreativity" : "Pioneer security solutions", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "8+ years program management experience, Experience using data and metrics, Experience owning program strategy, 5+ years Program or Project Management experience in Security domain, Experience managing enterprise-level projects, Experience managing continuous improvement programs", "qualificationsPreferred" : "2+ years driving process improvements, Master's degree or MBA, Experience owning cross-team security implementation programs, Experience driving operational security programs, Experience driving secure software development lifecycle programs, Experience working in security operations environment, Active project management certification, Agile management certification, AWS experience, AWS certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale incident response solutions in the cloud? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Service Security (GSS) you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Within this team, AWS CIRT is seeking a self-motivated leader with rich experience in customer service and interested in improving the way products are brought to market and distributed on a global scale to join us as a Program Manager for China. AWS CIRT is looking for a skilled and motivated senior Program Manager to expand the security program that responds to customer security incidents at scale. You will manage the roadmap and apply strong judgement that balances immediate security campaigns with longer-term, strategic planning. This role is inherently cross-functional, working closely with senior leadership, security engineers, and dozens of service teams. A successful candidate will have a good mix of deep technical security knowledge and a demonstrated track record of successful complex and large scale program/project deliveries. Key job responsibilities • A proven track record of implementing, delivering large projects and communicating effectively at executive level • Manage a portfolio of critical security offerings and services that are internal and external facing • Excellent program and project management skills, with the ability to work in a fast-paced environment • Effective prioritization of tasks, and seamless operation across organizational boundaries • Building and deploying training programs for all users in the Greater China Region • Brief customers on AWS CIRT and AWS Security Incident Response service • Continuously prioritize risk for service teams, security teams, and executive leadership • Collaborate with business/service teams to understand and confirm security assessment scope and controls design About the team This role will be to join the AWS Customer Incident Response Team (CIRT) aka Zipline - https://w.amazon.com/bin/view/AWS/Teams/GlobalServicesSecurity/TDIR/Zipline Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 8+ years of program or project management experience - Experience using data and metrics to determine and drive improvements - Experience owning program strategy, end to end delivery, and communicating results to senior leadership - 5+ years of Program or Project Management experience managing enterprise-level projects and continuous improvement programs in the Security domain. - Program or Project Management Professional Certification Preferred Qualifications: - 2+ years of driving process improvements experience - Master's degree, or MBA in business, operations, human resources, adult education, organizational development, instructional design or related field - Experience in owning cross-team security implementation programs inclusive of metrics, communications and prioritization. - Experience driving operational security and secure software development lifecycle programs. - Experience working in a security operations environment. - Have at least one active project or agile management certification. - AWS experience and/or relevant certifications. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Customer Incident Response Program Manager at Amazon Information Service. Skills: Incident response, Program management, Security. Manage a portfolio of critical security offerings. Manage a portfolio of critical security services", "postedDate" : "2026-06-13T10:08:25.455", "createdAt" : "2026-06-13T10:08:25.455", "lastUpdated" : "2026-06-15T04:15:54.586", "ingestTimestamp" : "2026-06-13T10:08:25.455", "mongoId" : "68c2e43bf8b1b0376634c922", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071459/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Security operations", "Leadership", "Program management", "Security", "Security assessment", "Controls design", "Project management", "Roadmap management", "Strategic planning", "Cloud security", "Program or Project Management Professional Certification", "AWS certifications" ], "skillCount" : 13, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2c6a5674d8ee00a090b560", "title" : "Director Security Engineering", "company" : "MX Technologies, Inc.", "industry" : "FinTech", "salary" : { "min" : 225000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director of Security Engineering in Lehi, United States, adjusted for FinTech industry and company size." }, "location" : "Lehi, Utah, United States", "locations" : [ "Lehi", "Utah", "United States" ], "timestamp" : "2026-06-15T12:23:39.324", "fingerprint" : "035c644fd92e9ea5603f5bdf1465ec9a767cd438ff7b06718b30669a396bbe39", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/mxtechnologiesinc/jobs/4246764009", "externalId" : "4246764009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lehi", "state" : "Utah", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.3881114,-111.8486019" } ], "locationText" : "Lehi, Utah, United States", "experienceLevel" : "Director", "technicalSkills" : "Cloud security, AWS, GCP, Generative AI, GenAI, LLM security, Agentic AI, Prompt injection mitigation, CI/CD security, Runtime security", "professionalSkills" : [ "Product design reviews", "Service ownership model", "Risk management", "Compliance frameworks" ], "hardSkillsList" : [ "Threat detection", "Response program", "Security engineering", "Network security" ], "softSkillsList" : [ "Servant leader", "Forward thinking" ], "hardSkills" : [ { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response program", "level" : "intermediate" }, { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Servant leader" }, { "name" : "Forward thinking" } ], "majorSkills" : "Security Engineering, GenAI Security, Cloud Security, AI Security", "majorSkillsList" : [ "Security Engineering", "GenAI Security", "Cloud Security", "AI Security" ], "coreResponsibilities" : "Mature operational security capabilities, Evolve threat detection program, Drive strategic improvements, Lead day-to-day operations, Shape organization's strategic direction, Provide tactical operational support, Drive GenAI use, Secure Generative AI models, Secure related data pipelines, Secure agentic AI systems, Protect customer data, Preserve integrity of MX platform, Develop vision for Security Engineering, Develop strategy for Security Engineering, Align strategy with business objectives, Align strategy with risk appetite, Align strategy with industry best practices, Lead cybersecurity engineers, Mentor cybersecurity engineers, Develop cybersecurity engineers, Direct service ownership model, Track service effectiveness, Evaluate engineering processes, Improve engineering processes, Identify automation areas, Identify optimization areas, Identify efficiency areas, Develop policies, Maintain policies, Develop procedures, Maintain procedures, Develop standards, Maintain standards, Perform product requirements analysis, Perform design reviews, Evaluate technology, Select technology", "teamCollaboration" : "Cross functional teams; GRC teams", "projectManagementSkills" : [ "Program leadership" ], "domainKnowledge" : "Modern cloud security; Modern network security; Zero trust; Microservices security; Distributed systems; SOC 2; PCI DSS; NIST", "domainList" : [ "modern-cloud-security", "modern-network-security", "zero-trust", "microservices-security", "distributed-systems", "soc-2", "pci-dss", "nist" ], "domainSpecificKnowledge" : [ "Modern cloud security", "Modern network security", "Zero trust", "Microservices security", "Distributed systems", "SOC 2", "PCI DSS", "NIST" ], "innovationCreativity" : "Innovation encouraged", "qualificationsBasic" : "10+ years cybersecurity experience, 5+ years leadership role, 5+ years cloud security experience, 3+ years GenAI security experience", "qualificationsPreferred" : "Experience securing agentic AI systems, Understanding of modern security architecture, Experience implementing security tools, Partnering with GRC teams, Bachelor's degree, Master's degree preferred, Relevant certifications preferred", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "MX is a fintech company on a mission to empower the world to be financially strong. We build technology that helps banks, credit unions, and fintechs deliver smarter, more intuitive financial experiences to millions of people. Like many startups, we’ve navigated real growth challenges — and we’ve come out stronger on the other side. Today, MX is in a phase of renewed momentum and scale, with a solid foundation and a clear vision for what’s next. This is a place where thoughtful execution matters, innovation is encouraged, and individuals have real ownership over their work. Our culture values curiosity, accountability, and impact. We give people the space to question assumptions, design better solutions, and help shape how the company grows. If you’re looking to do meaningful work, influence outcomes, and grow alongside a company that’s ready to move fast, you’ll feel at home at MX. As a Director of Security Engineering, you’ll work to mature our operational security capabilities, evolve our threat detection and response program, and drive strategic improvements. We’re looking for a hands-on Director of Security Engineering to join our team and help elevate our security team and program to the next level. The ideal candidate for the role will be a passionate, data driven, team-oriented, servant leader who can lead day-to-day operations, help shape the organization’s strategic direction, and, when needed, provide tactical operational support to the team. We are looking for a forward thinking leader already driving programs in: Driving the use of GenAI and Agentic AI to make Security functions more efficient and effective. Deep experience securing Generative AI (GenAI) models and related data pipelines, including prompt injection mitigation and LLM security to enable our engineering teams. Demonstrated expertise in securing agentic AI systems, focusing on runtime protection, secure communication between agents, and mitigating risks associated with autonomous operations. Strong understanding of modern cloud and network security principles, especially in AWS and GCP. In depth experience in executing and leading all Security Engineering verticals, from product design reviews to CI/CD security to runtime security. This person must be mission and values-driven, must have an ownership mentality, and must put the well-being of our customers, our teammates, and our organization at the forefront of how they operate. This person must be able to operate and thrive in a dynamic, high-growth startup environment with established Security Engineering and GRC teams. This is a critical, high-impact role that will serve as a catalyst for growth for any seasoned cybersecurity and technology leader up to the challenge. The Director of Security Engineering is the senior operational leader overseeing this critical area of the organization. This position operates within the Office of the Chief Information Security Officer (CISO) and reports directly to the CISO. The director is responsible for the daily operational leadership and management of the company’s enterprise cybersecurity, information security, and related programs. Additionally, they partner with the Director, GRC to ensure the effective governance of security risks necessary to manage organizational risk, maintain compliance with relevant frameworks and programs, implement resilient and secure IT systems, and prioritize security, privacy, and customer trust throughout the organization. Here are some of the problems you’ll help us solve: Program Leadership - Develop and refine the overall vision and strategy for the Security Engineering and Operations program, aligning it with business objectives, risk appetite, and industry best practices. Team Management - Lead, mentor, and develop a high-performing team of cybersecurity engineers, focusing on the concepts of Service Ownership.  Own and direct a service ownership model for all security services based on security design foundations. The services will be closely tracked for effectiveness using service outcome metrics, maturity metrics, and business ROI metrics. Foster a collaborative and results-oriented environment.  Assign tasks, provide feedback, and conduct performance reviews. Process Improvement - Continuously evaluate and improve engineering processes and system/control performance, identifying areas for automation, optimization, and increased efficiency.  Develop and maintain relevant policies, procedures, and standards. MX Platform oversight - Partner with cross functional teams to perform product requirements analysis and design reviews to ensure the delivery of services that protect our customers data and preserve the integrity of all MX platform processes. Technology Oversight - Evaluate, select, and implement technology solutions and tools that efficiently provide required security control capabilities, with a specific focus on robust security in AWS cloud environments.  Ensure the effective utilization of these tools and integrate them with other security systems.  Stay current with emerging security technologies and threats, including those related to GenAI and agentic AI. Reporting & Metrics - Develop and maintain key performance indicators (KPIs) and metrics to track the performance and effectiveness of security technologies and the overall security engineering program.  Provide regular reports to peers and leadership on trends, progress, risks, and overall security posture. Compliance & Audits: Partner with the Governance, Risk, and Compliance (GRC) team to strike a balance between enforcing controls and maintaining engineering velocity. Ensuring compliance with relevant security regulations and standards (e.g., PCI DSS, SOC2, & NIST).  Support internal and external audits as necessary. Collaboration & Communication - Effectively communicate information related to the security engineering program to technical and non-technical audiences. Collaborate with other security teams, IT operations, and business units. Cultivate and evangelize a culture of security across MX through training, internal communications, and stakeholder engagement, making security a shared responsibility at every level. Serve as a strategic partner to all MX business teams to drive cross-functional security initiatives, reduce technical debt, and implement pragmatic, risk-based and scalable solutions. The Team You'll Work With: You will be part of a security-minded team that believes in progress over perfection and where both security culture and mindset are key. Our team is rethinking how security operations can be accomplished in innovative ways. We focus on enabling our business to security deliver world class services while minimizing and managing risk exposure for MX and its customers. Basic Qualifications 10+ years of experience in cybersecurity, security engineering, or related fields 5+ years in a leadership role overseeing security operations or engineering teams 5+ years of hands-on experience in cloud security, particularly in AWS or GCP environments 3+ years of experience securing Generative AI (GenAI) systems, including LLM security, prompt injection mitigation, and data pipeline protection Preferred Qualifications Experience securing agentic AI systems, including runtime protection and secure agent communication Strong understanding of modern security architecture patterns, including zero trust, microservices security, and distributed systems Experience implementing and optimizing security tools and platforms across cloud environments Experience partnering with GRC teams and supporting compliance frameworks (e.g., SOC 2, PCI DSS, NIST) Bachelor’s degree in Computer Science, Cybersecurity, or related field (Master’s or relevant certifications preferred) Compensation The expected on-target earnings (OTE), which is comprised of a base salary and other forms of cash compensation, such as bonus or commissions is currently $225,600 to $283,200. This pay range is just one component of MX's total rewards package. MX takes a number of factors into account when determining individual starting pay, including job and level they are hired into, location, skillset, peer compensation. At MX, we are a high-performance organization that thrives on trust and results. This role is based in Lehi, Utah. We believe in empowering our team members to deliver exceptional outcomes while taking advantage of our incredible office space when it best supports their work. Our Utah office features onsite perks such as company-paid meals, a sports simulator, gym, mother’s lounge, and meditation room and meaningful interactions with amazing people. We encourage team members to come together in the office to collaborate, kick off key projects, or strategize cross-functionally, fostering connection and innovation. MX is proudly committed to recruiting and retaining a diverse and inclusive workforce. As an Equal Opportunity Employer, we never discriminate based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, military or veteran status, status as an individual with a disability, or other applicable legally protected characteristics. We particularly welcome applications from veterans and military spouses. All your information will be kept confidential according to EEO guidelines. You may request reasonable accommodations by sending an email to hr@mx.com.", "summaryDescription" : "Director Security Engineering at MX Technologies, Inc.. Skills: Security Engineering, GenAI Security, Cloud Security, AI Security. Mature operational security capabilities. Evolve threat detection program", "postedDate" : "2026-06-14T09:22:45.668", "createdAt" : "2026-06-14T09:22:45.668", "lastUpdated" : "2026-06-15T12:23:39.324", "ingestTimestamp" : "2026-06-14T09:22:45.668", "mongoId" : "6a2c6a5674d8ee00a090b560", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 225000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Threat detection", "Response program", "Security engineering", "Network security", "Servant leader", "Forward thinking", "Security Engineering", "GenAI Security", "Cloud Security", "AI Security", "Product design reviews", "Service ownership model", "Risk management", "Compliance frameworks", "Program leadership", "Modern cloud security", "Modern network security", "Zero trust", "Microservices security", "Distributed systems", "SOC 2", "PCI DSS", "NIST" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.97 }, { "id" : "68e6b1d770f0b99d58d66961", "title" : "AWS Security Assurance Services, Practice Manager, Saudi Arabia, AWS Security Assurance Services", "company" : "AWS EMEA SARL (Saudi Arabia Branch)", "industry" : "Systems, Quality, Security Engineering, Professional Services, Cloud Computing", "salary" : { "min" : 375000.0, "max" : 575000.0, "currency" : "SAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Riyadh, Saudi Arabia within the Technology industry, adjusted for AWS's size and reputation." }, "location" : "Riyadh, SAU", "locations" : [ "Riyadh, SAU" ], "timestamp" : "2026-06-16T04:23:36.790", "fingerprint" : "76f2cb4d1def29e5f271093f0d18bc5c9c93b04db26a899c93050d8d9c653d72", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3103804/apply", "externalId" : "a8ba74c5-906d-4587-bc1e-f96752d82ddd", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Riyadh", "country" : "Saudi Arabia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "24.6389160,46.7160104" } ], "locationText" : "Riyadh, Saudi Arabia", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceLevel" : "Manager", "technicalSkills" : "AWS, IaaS", "professionalSkills" : [ "IT Transformation", "Enterprise architecture", "Program management", "Engagement management" ], "hardSkillsList" : [ "Security assurance", "Risk management", "Compliance management", "Cloud security", "IT consulting" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security assurance", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Compliance management", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "IT consulting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security Assurance, Risk Management, Compliance, Cloud Migration", "majorSkillsList" : [ "Security Assurance", "Risk Management", "Compliance", "Cloud Migration" ], "coreResponsibilities" : "Build teams for security objectives, Define security approaches for customers, Resolve security assurance questions, Manage risk and compliance objectives, Demonstrate automating compliance, Convey customer feedback to roadmaps, Build customer relationships, Support Business Development efforts, Support Customer Success efforts", "teamCollaboration" : "Work with lines of business; Work with AWS engineering; Work with support teams; Work with business teams; Work with AWS sellers", "projectManagementSkills" : [ "Program management", "Engagement management" ], "domainKnowledge" : "Shared responsibility model; Enterprise risk management; Cloud computing; Cyber security; Compliance objectives; AWS Cloud", "domainList" : [ "shared-responsibility-model", "enterprise-risk-management", "cloud-computing", "cyber-security", "compliance-objectives", "aws-cloud" ], "domainSpecificKnowledge" : [ "Shared responsibility model", "Enterprise risk management", "Cloud computing", "Cyber security", "Compliance objectives", "AWS Cloud" ], "communicationSkills" : "Strategic presentations; Strategic recommendations", "innovationCreativity" : "Innovative security leader", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Ability to travel", "outcomesObjectives" : "Deliver bar raising security outcomes; Achieve security outcomes; Achieve compliance objectives; Enable customers moving workloads; Address specific risk requirements; Address regulatory requirements; Address compliance requirements", "qualificationsBasic" : "10+ years IT consulting, 3+ years program management, Knowledge of IaaS cloud computing, Experience in IT consulting, Experience in program management, Experience in enterprise architecture, Experience managing large-scale IT projects", "qualificationsPreferred" : "Knowledge of IT management frameworks, Experience integrating AWS cloud services, Experience with customer relationship management, Experience with delivery models", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Global Services, Security (GSS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Security, Governance, Risk, and Compliance leader who can build a team that addresses the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures? The AWS Security Assurance Service team, within GSS, is seeking a talented Practice Manager to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services help operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by developing a high performing team of consultants who help enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements. You will be expected to also work in a Business Development capacity, assisting our AWS sellers to position the value and applicability of your team into customer projects and long-term relationships. We are looking for an innovative security and compliance leader who enjoys establishing strategy and then drives consensus across the team to achieve a vision. Key job responsibilities Expertise – Builds teams that deliver on innovative governance, risk, compliance and security objectives Solutions - Builds a team that can define security, compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster. Delivery – Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve security and compliance objectives while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment. Insights - Lead efforts with AWS engineering, support, and business teams to convey partner and customer feedback as input to AWS technology roadmaps. Ability to travel to customer sites as needed. Relationships – Build long-lasting customer relationships with strategic stakeholders, supporting the Business Development and Customer Success efforts of AWS Security Assurance Services. About the team AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Basic Qualifications: - 10+ years of IT consulting/management with IT Transformation in customer-facing roles experience - 3+ years of program or engagement management work leading other project managers to deliver a program with multiple and concurrent projects experience - Bachelor's degree in Computer Science, Math, or a related field - Knowledge of infrastructure-as-a-service (IaaS) cloud computing transition challenges - Experience in IT consulting/management with IT Transformation in a customer-facing role - Experience in program or engagement management, leading other project managers to deliver a program with multiple and concurrent projects - Experience in enterprise architecture including virtualization technologies & distributed architecture - Experience managing and delivering large-scale enterprise IT projects Preferred Qualifications: - Knowledge of enterprise IT management frameworks like COBIT or ITIL - Experience integrating AWS cloud services with on-premise technologies (e.g., Microsoft, IBM, Oracle, HP, SAP) - Experience with customer relationship management, especially C-suite level customer engagement - Experience with design of modern, scalable delivery models for technology consulting services Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "AWS Security Assurance Services, Practice Manager, Saudi Arabia, AWS Security Assurance Services at AWS EMEA SARL (Saudi Arabia Branch). Skills: Security Assurance, Risk Management, Compliance, Cloud Migration. Build teams for security objectives. Define security approaches for customers", "postedDate" : "2026-06-14T19:48:19.985", "createdAt" : "2026-06-14T19:48:19.985", "lastUpdated" : "2026-06-16T04:23:36.790", "ingestTimestamp" : "2026-06-14T19:48:19.985", "mongoId" : "68e6b1d770f0b99d58d66961", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3103804/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security assurance", "Risk management", "Compliance management", "Cloud security", "IT consulting", "Leadership", "Security Assurance", "Risk Management", "Compliance", "Cloud Migration", "IT Transformation", "Enterprise architecture", "Program management", "Engagement management", "Shared responsibility model", "Enterprise risk management", "Cloud computing", "Cyber security", "Compliance objectives", "AWS Cloud" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68e6b1d770f0b99d58d669d3", "title" : "Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT)", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T03:07:34.087", "fingerprint" : "e41ba28c00f8a5fa7ff7a6b6f7e4b967a32c1d34e6140338d9bfa0a32bb978b0", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3103444/apply", "externalId" : "3edaebce-b7da-4159-88b6-ebd603fd4b2d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, C, C++, Java, Ruby, PowerShell, AWS", "professionalSkills" : [ "Incident response", "Threat detection", "Security operations", "Cloud security" ], "hardSkillsList" : [ "Log collection", "Log analysis", "Root cause analysis", "Preventative guidance" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Log collection", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Preventative guidance", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Incident response, Threat detection, Security solutions", "majorSkillsList" : [ "Incident response", "Threat detection", "Security solutions" ], "coreResponsibilities" : "Support incident response operations, Become a technical resource, Contribute to build and deploy threat detection and, Collaborate to design, build, and deploy solutions to, Develop high-quality content, Innovate on behalf of customers, Mentor and invest in our team, partners and", "teamCollaboration" : "Part of a team; Collaborate with AWS service teams", "domainKnowledge" : "Cloud environments; Scalable computing architectures; Security incidents; Security operations; Shared security model", "domainList" : [ "cloud-environments", "scalable-computing-architectures", "security-incidents", "security-operations", "shared-security-model" ], "domainSpecificKnowledge" : [ "Cloud environments", "Scalable computing architectures", "Security incidents", "Security operations", "Shared security model" ], "communicationSkills" : "Communicate complex technical matters", "documentationSkills" : "Reference architectures; White papers; Blog posts", "innovationCreativity" : "Innovate with new technologies; Explore new challenges", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Periodic on-call required", "outcomesObjectives" : "Achieve more with AWS cloud; Respond to security incidents; Automate security operations; Deliver results", "qualificationsBasic" : "Experience with coding/scripting in one or more languages, Knowledge of networks, protocols, cloud and security fundamentals, 2+ years of hands-on technical experience in threat detection, log collection and analysis, incident response, and/or security operations", "qualificationsPreferred" : "Experience with core security functions, Hands-on technical experience in building scripts, tools, or methodologies, Experience with developing and training AI models, Communicate complex technical matters clearly and concisely orally and in writing, Ability to manage customers expectations during security events, and deliver results", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale incident response solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the Threat Detection and Incident Response Practice in the AWS Global Service Security you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. The Global Services Security team, a part of Amazon Web Services (AWS), leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. The AWS Customer Incident Response Team (CIRT) is a specialized 24/7 global (AWS) team that provides support to customers in responding to active security events on their side of the shared security model. The team is made up of AWS Solutions Architects and Security Engineers who are experienced in incident response.to assist customers with identifying Indicators of Compromise, isolation, containment, log collection and analysis, determining root cause, recovery, and preventative guidance to avoid recurrence. Key job responsibilities • Support incident response operations • Become a technical resource that earns the trust of customer stakeholders before, during, and after a security event. • Contribute as part of a team to build and deploy threat detection and incident response capabilities. • Collaborate to design, build, and deploy solutions to automate security operations and incident response on AWS. • Develop high-quality content, such as reference architectures, white papers, and blog posts to help AWS customers secure their workloads. • Innovate on behalf of customers by translating your thoughts into action-driven results. • Mentor and invest in our team, partners and customers to raise the bar for our customers. • Periodic on-call required. About the team Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell) - Knowledge of networks, protocols, cloud and security fundamentals . - 2+ years of hands-on technical experience in threat detection, log collection and analysis, incident response, and/or security operations. Preferred Qualifications: - Experience with any combination of core security functions such as threat modeling, secure software development, data classification, identity management and authentication, cryptography, system administration, network security, and forensics. - Hands-on technical experience in building scripts, tools, or methodologies that enhance customers’ threat detection and incident response capabilities. - Experience with developing and training AI models. - Can communicate complex technical matters clearly and concisely orally and in writing. - Ability to manage customers expectations during security events, and deliver results. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT) at Amazon Web Services, Inc.. Skills: Incident response, Threat detection, Security solutions. Support incident response operations. Become a technical resource", "postedDate" : "2026-06-13T08:42:48.387", "createdAt" : "2026-06-13T08:42:48.387", "lastUpdated" : "2026-06-15T03:07:34.087", "ingestTimestamp" : "2026-06-13T08:42:48.387", "mongoId" : "68e6b1d770f0b99d58d669d3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3103444/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log collection", "Log analysis", "Root cause analysis", "Preventative guidance", "Mentoring", "Incident response", "Threat detection", "Security solutions", "Security operations", "Cloud security", "Cloud environments", "Scalable computing architectures", "Security incidents", "Shared security model" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69cf3f042beec4dd3d933ff1", "title" : "AWS Security Korea CISO, AWS Compliance & Security Assurance", "company" : "Amazon Web Services Korea LLC", "industry" : "Corporate Operations, Security Industry Specialist, amazon security", "salary" : { "min" : 2.5E8, "max" : 4.0E8, "currency" : "KRW", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an executive-level AWS CISO in Seoul, South Korea, adjusted for industry and company size." }, "location" : "Seoul, KOR", "locations" : [ "Seoul, KOR" ], "timestamp" : "2026-06-15T06:20:41.789", "fingerprint" : "74613ce51f03c46d57cb149c7289e5e5d3b0dbb41028c6e777f5a89cd266f611", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382454/apply", "externalId" : "1d4c0839-5c09-4b0c-8c2d-9973fb30a9b1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seoul", "country" : "South Korea", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "37.5666791,126.9782914" } ], "locationText" : "Seoul, South Korea", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Executive", "technicalSkills" : "Cloud computing", "professionalSkills" : [ "Regulatory compliance", "Security assurance", "Risk management", "Policy development" ], "hardSkillsList" : [ "Translate regulatory requirements", "Develop mitigation approaches", "Define processes", "Define methods", "Execute projects", "Analyze data", "Make recommendations" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Translate regulatory requirements", "level" : "intermediate" }, { "name" : "Develop mitigation approaches", "level" : "intermediate" }, { "name" : "Define processes", "level" : "intermediate" }, { "name" : "Define methods", "level" : "intermediate" }, { "name" : "Execute projects", "level" : "intermediate" }, { "name" : "Analyze data", "level" : "intermediate" }, { "name" : "Make recommendations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security, Compliance, Assurance, Cloud security", "majorSkillsList" : [ "Security", "Compliance", "Assurance", "Cloud security" ], "coreResponsibilities" : "Deliver industry standard audits, Deliver regulatory audits, Serve as regulatory expert, Anticipate laws and regulations, Develop mitigation approaches, Develop implementation approaches, Escalate and manage escalations, Develop regulatory projects, Develop regulatory initiatives, Create cross-functional groups, Optimize cross-functional groups, Support cross-functional groups, Create projects, Optimize projects, Support projects, Prepare project plans, Track projects through fruition, Support metrics, Implement data collections, Analyze data, Make recommendations", "teamCollaboration" : "Interact with Auditors; Interact with Regulators; Interact with VPs; Interact with CISOs; Interact with CTOs; Cross-functional groups; External stakeholders; Internal stakeholders", "projectManagementSkills" : [ "Project planning", "Project execution" ], "domainKnowledge" : "Information security; Data protection; Information technology; Regulatory requirements; Government security; Privacy requirements; Cloud computing; Industry standard audits; Korean regulatory audits; Outsourcing regulations; Cybersecurity regulations; Operational resilience", "domainList" : [ "information-security", "data-protection", "information-technology", "regulatory-requirements", "government-security", "privacy-requirements", "cloud-computing", "industry-standard-audits", "korean-regulatory-audits", "outsourcing-regulations", "cybersecurity-regulations", "operational-resilience" ], "domainSpecificKnowledge" : [ "Information security", "Data protection", "Information technology", "Regulatory requirements", "Government security", "Privacy requirements", "Cloud computing", "Industry standard audits", "Korean regulatory audits", "Outsourcing regulations", "Cybersecurity regulations", "Operational resilience" ], "communicationSkills" : "Executive presentations", "innovationCreativity" : "Innovative security professional", "problemSolvingSkills" : "Address requirements", "qualificationsBasic" : "4 years of experience in data protection, 5 years combined experience in IT and data protection, 2 years experience in data protection, 10+ years working in Computer Science, Engineering, Cyber Security, IT Security Management, 5+ years working directly in Security organization overseeing data protection, 5+ years working directly with government officials and/or company executives on financial regulatory, technology, or related policy issues, Speak, write, and read fluently in Korean, Speak, write, and read fluently in English", "qualificationsPreferred" : "Bachelor's degree or above in Cybersecurity, Information Security, or related field, 1+ Years as head of department responsible for data protection", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon obsesses over customers; delivering results for customers is what we do. We are looking for independent, passionate, and deeply experienced professionals in the Security, Compliance and Assurance domain to provide depth in assisting our partners, customers and their stakeholders to understand and address their security, regulatory and compliance requirements in moving their sensitive workloads and heavily regulated data into the cloud. This candidate for the AWS Korea CISO position should be a technically experienced and innovative security/compliance professional who has the ability to handle a wide range of regulatory, government security, and privacy requirements. They have the ability to can translate those requirements into security controls for cloud computing. This position will require prior experience in industry standard third party audits (e.g. SOC, PCI, ISO) and/or Korean regulatory audits (e.g. MSIT, RSEFT, CSAP), and will be responsible for personally delivering these audits along side peers who are also delivering audits in this space. The position will have high visibility at senior levels of government agencies, institutions, customers, and Amazon leadership. Including frequent interaction with Auditors, Regulators, VPs, CISOs, and CTOs. This position will drive compliance with Korean regulations and integrate these controls with global AWS standards, practices, and policies. This role, as part of the AWS Security Assurance team in Korea, requires the ability to develop long-term projects and define processes and methods to ensure execution and productivity across multiple internal and external stakeholders, including customers and regulatory agencies. Mandatory Korean CISO Requirements: Candidate must meet the CISO qualification requirements under the Act on Promotion of Information and Communications Network Utilization and Information Protection (정보통신망 이용촉진 및 정보보호 등에 관한 법률) and its Enforcement Decree, including: (a) At least 4 years of experience in the field of \"data protection\"; or (b) At least 5 years of combined experience in the fields of \"information technology\" and/or \"data protection,\" provided that the experience in the \"data protection\" field must be at least 2 years. Key job responsibilities Delivering Industry Standard and Regulatory Audits Serve as regulatory expert to AWS, customers, auditors, and regulators on regional and domestic regulations on outsourcing, cybersecurity, and operational resilience in the industry. Anticipate new or potential domestic and regional laws and regulations for potential impact to AWS and our customers, and develop appropriate mitigation and implementation approaches in Korea. Escalate and manage escalations as necessary. Develop and execute long-term regulatory projects and initiatives, which may have broad scope and complexity, for AWS and AWS' regulated customers. Create, optimize, and support cross-functional groups and projects. Prepare project plans and track projects through fruition. Support metrics, implement data collections mechanisms, analyze data and make recommendations Basic Qualifications: - Speak, write, and read fluently in Korean - Speak, write, and read fluently in English - 10+ years working in the field of Computer Science, Engineering, Cyber Security, IT Security Management - 5+ years working directly in a Security organization overseeing data protection policies and mechanisms - 5+ years of experience working directly with government officials and/or company executives on: financial regulatory, technology, or related policy issues. Preferred Qualifications: - Bachelor's degree or above in Cybersecurity, Information Security, or a related field - 1 + Years as head of a department responsible for data protection Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "AWS Security Korea CISO, AWS Compliance & Security Assurance at Amazon Web Services Korea LLC. Skills: Security, Compliance, Assurance, Cloud security. Deliver industry standard audits. Deliver regulatory audits", "postedDate" : "2026-06-13T08:14:38.145", "createdAt" : "2026-06-13T08:14:38.145", "lastUpdated" : "2026-06-15T06:20:41.789", "ingestTimestamp" : "2026-06-13T08:14:38.145", "mongoId" : "69cf3f042beec4dd3d933ff1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382454/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Translate regulatory requirements", "Develop mitigation approaches", "Define processes", "Define methods", "Execute projects", "Analyze data", "Make recommendations", "Leadership", "Security", "Compliance", "Assurance", "Cloud security", "Regulatory compliance", "Security assurance", "Risk management", "Policy development", "Project planning", "Project execution", "Information security", "Data protection", "Information technology", "Regulatory requirements", "Government security", "Privacy requirements", "Cloud computing", "Industry standard audits", "Korean regulatory audits", "Outsourcing regulations", "Cybersecurity regulations", "Operational resilience" ], "skillCount" : 30, "jobCategory" : "operations", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a307f2df292fd229c055eaf", "title" : "Senior Information Security Engineer, Product Security Engineering", "industry" : "Cybersecurity", "salary" : { "min" : 165000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Engineer in Kirkland, United States, adjusted for seniority and industry." }, "location" : "[Kirkland, WA, USA, [Kirkland, WA, USA], Kirkland, null, WA, US]", "locations" : [ "[Kirkland, WA, USA, [Kirkland, WA, USA], Kirkland, null, WA, US]", "[New York, NY, USA, [New York, NY, USA], New York, null, NY, US]", "[Seattle, WA, USA, [Seattle, WA, USA], Seattle, null, WA, US]", "[Sunnyvale, CA, USA, [Sunnyvale, CA, USA], Sunnyvale, null, CA, US]" ], "timestamp" : "2026-06-16T11:50:28.658", "fingerprint" : "f57d4512af7f8cb0dc5df218e440476612d7d2c3c72cd8fd11d0343d88787a58", "source" : "google", "language" : "en", "externalId" : "86949748946150086", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kirkland", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6765382,-122.2070775" } ], "locationText" : "Kirkland, Washington, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "summaryDescription" : "Senior Information Security Engineer, Product Security Engineering", "postedDate" : "2026-06-16T01:51:13.433", "createdAt" : "2026-06-16T01:51:13.433", "lastUpdated" : "2026-06-16T11:50:28.658", "ingestTimestamp" : "2026-06-16T01:51:13.433", "mongoId" : "6a307f2df292fd229c055eaf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c946074d8ee00a098a439", "title" : "Security Manager", "company" : "The Durst Organization", "salary" : { "min" : 145000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for a Security Manager in New York, adjusted for manager seniority and the real estate industry." }, "location" : "ONE WORLD TRADE CENTER, NEW YORK, NY 10007", "locations" : [ "ONE WORLD TRADE CENTER", "NEW YORK", "NY 10007" ], "timestamp" : "2026-06-15T21:26:52.706", "fingerprint" : "a304583fed93e1093469140efd59ef273d7b0bc8c017168556b4f85c6f61bea9", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/thedurstorganization/jobs/4017144009", "externalId" : "4017144009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "rawDescription" : "Durst Profile: Since 1915, The Durst Organization has been a family-run business dedicated to the principles of innovation, integrity, community, and sustainability. We develop, build, own, and manage premier office towers and residential buildings that set new standards in environmental responsibility and user efficiency. Our enduring relationships with our tenants and partners are critical to our success and have made us generations of builders, building for generations. We build, own, and operate many of the world’s most innovative and efficient buildings. We create value for our tenants and partners by developing sustainable residential and commercial properties in which people live, work, and thrive. Overview: The Security Manager will collaborate with the Director of Security to ensure the safety of employees, tenants and visitors throughout the organization. He/she will identify security initiatives and work to constantly update security guidelines and procedures. The Security Manager will maintain oversight for security supervisors, as well as, security officers and will physically patrol portfolio properties ensuring the safety of portfolio buildings and tenants. Further, the Security Manager will assist in the management of company response to natural and manmade disasters. The following shift is available: 3pm -11pm, Regular days off (RDO) TBD Responsibilities: Assist the Sr. Security Manager in setting goals and planning for the future Work to communicate physical and technical security strategies to company employees Ensure the appropriate staffing and schedules for areas under their supervision Respond expeditiously to calls of security breaches and other incidents made by building tenants, company employees and/or other staff Collaborate with senior management to maintain best practices with respect to security policies and procedures and document disciplinary matters, as appropriate; Liaise with government agencies and area law enforcement entities to ensure the safety of properties under TDO management control; Provide leadership, direction, guidance and training to Security Guards under their supervision. Manage additional responsibilities within our security organization as necessary. Serve as a resource, advocate, and catalyst for sustainability at The Durst Organization. Apply the skills unique to your core job responsibilities for practical integration of sustainability into processes, standard operating procedures, and adopted business practices. Seek to empower our colleagues, consultants, tenants and residents to prioritize and actively engage in environmental stewardship. Qualifications: The successful candidate will have the ability to articulate area security issues, documenting both short-term plans and long-term strategy. He/she will have a demonstrated understanding of physical security strategies, policies, principles, procedures, and standards. Further, the successful candidate will have the ability to think critically through the intricacies of complex situations. Finally, he/she will demonstrate technical knowledge and experience in defining access control policies and governance, asset protection best practices, business continuity and disaster recovery planning. Proven staff management skills (union and non-union) Analyzing and Decision-Making Coordinating, Organizing, and Planning Acquiring, Applying, and Sharing Job Knowledge Maintaining High Professional Standards Communicating - Oral and in Written Maintaining and Managing Programs and Resources Achieving Results Certificates, Licenses, Registrations: Must possess a HR-218 Certification, NYS Armed Guard License, and a Valid Motor Vehicle Operator’s License at the time of hire Must hold an active NYC Unrestricted Concealed Carry Handgun License or have the ability to obtain one Able to obtain certifications in Basic First Aid, CPR and AED. Education: Bachelor’s degree in Criminal Justice, or a related field or equivalent experience 15 years of relevant work experience in law enforcement and/or security operations with at least five years of experience in a managerial capacity Salary Range: $75,000 - $95,000 (hourly rate is $36.06/hour - $45.67/hour) EEOC Equal Opportunity Employer and Affirmative Action Employer for Protected Veterans and Individuals with Disabilities. The Durst Organization and Affiliates is an equal opportunity employer for all and an employer for qualified veterans and individuals with disabilities in accordance with the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA) and the Rehabilitation Act of 1973. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, genetic information, disability or protected veteran status, or any other characteristic protected by law. Please click here for more information about Equal Opportunity Employment – Notice of Rights (EEO is the Law). We seek individuals who exemplify The Durst Organization’s mission of providing the best service to our tenants, residents and partners. If you are ready to make a change and would like to join our team of dedicated professionals please review the currently open job listings and apply for those positions for which you meet the minimum qualifications. If you are a qualified individual with a disability, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use the careers site as a result of your disability. To request an accommodation, please click here and let us know the nature of your request and provide your contact information. Please do not direct any other general employment related questions using the link provided. We will only respond to inquiries concerning requests for reasonable accommodations. The content provided on this site is intended for informational purposes only and is not intended to constitute an offer or solicitation. Despite the efforts of The Durst Organization to provide accurate information on this site, it is not possible to ensure that all information is correct or up to date. Information on this site does not modify or supersede tenants’ lease terms. The Durst Organization assumes no responsibility or liability for any actions taken as a result of using this site, or for errors or omissions in the content found on this server. Residents of California California Applicant Privacy Policy THIS SITE AND THE CONTENT ARE PROVIDED ‘”AS IS” AND WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED UNDER APPLICABLE LAW, THE DURST ORGANIZATION DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY, HABITABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. THE DURST ORGANIZATION DOES NOT REPRESENT OR WARRANT THAT THE CONTENT CONTAINED ON THE SITE WILL BE CORRECT, ACCURATE, ADEQUATE, USEFUL, TIMELY, OR RELIABLE, OR THAT RECEIPT OF THE CONTENT WILL BE UNINTERRUPTED OR ERROR-FREE. THE DURST ORGANIZATION DOES NOT UNDERTAKE TO CORRECT DEFECTS IN THE CONTENT, OR TO ENSURE THAT THIS SITE OR THE SERVER THAT MAKES THE SITE AVAILABLE ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.", "summaryDescription" : "Security Manager at The Durst Organization", "postedDate" : "2026-06-14T20:58:59.624", "createdAt" : "2026-06-14T20:58:59.624", "lastUpdated" : "2026-06-15T21:26:52.706", "ingestTimestamp" : "2026-06-14T20:58:59.624", "mongoId" : "6a2c946074d8ee00a098a439", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 210000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Real Estate", "llmIndustryConfidence" : 0.95 }, { "id" : "69d5e4972beec4dd3d931ac3", "title" : "Software Development Manager, AWS Security", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 184900.0, "max" : 250200.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "timestamp" : "2026-06-15T01:36:46.665", "fingerprint" : "bb5ce18163ebe93dd90bde9fb45232a6185f083a99d57201009df298455463dd", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10384307/apply", "externalId" : "020b10d5-a303-4c47-890b-ba0861a7cfb9", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Security automation, Security tooling, Scalable solutions, Cloud security, AI security", "professionalSkills" : [ "Roadmap planning", "Project execution", "Security operations" ], "hardSkillsList" : [ "Security architecture", "Automation frameworks", "Development practices", "Incident response", "Threat intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Automation frameworks", "level" : "intermediate" }, { "name" : "Development practices", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security automation, Security tooling, Scalable solutions", "majorSkillsList" : [ "Security automation", "Security tooling", "Scalable solutions" ], "coreResponsibilities" : "Lead security challenges, Set measurable goals, Orchestrate strategy and direction, Plan roadmaps, Schedule project execution, Hire engineering team, Build engineering team, Manage engineering team, Create team environment, Streamline security operations", "teamCollaboration" : "Collaborate with security teams", "projectManagementSkills" : [ "Roadmap planning", "Project execution" ], "domainKnowledge" : "Security architecture; Automation frameworks; Modern development practices; Incident response; Threat intelligence; Cloud security; AI security", "domainList" : [ "security-architecture", "automation-frameworks", "modern-development-practices", "incident-response", "threat-intelligence", "cloud-security", "ai-security" ], "domainSpecificKnowledge" : [ "Security architecture", "Automation frameworks", "Modern development practices", "Incident response", "Threat intelligence", "Cloud security", "AI security" ], "communicationSkills" : "Collect requirements; Describe software features; Describe technical designs; Describe product strategy", "innovationCreativity" : "Innovate security challenges", "problemSolvingSkills" : "Solve security challenges", "outcomesObjectives" : "Impact security posture; Enable automated response; Improve visibility", "qualificationsBasic" : "3+ years engineering team management, 7+ years engineering teams experience, 3+ years designing or architecting systems, 8+ years leading web services development, Knowledge of engineering practices lifecycle, Experience partnering with product management", "qualificationsPreferred" : "Experience communicating with users, Experience recruiting and managing engineers, Application security frameworks experience, Security code reviews experience, Incident response experience, Secure infrastructure experience, Penetration testing experience, Mobile security experience, Cloud security experience, AI security experience, Identity and access controls experience, Threat modeling experience, Cryptography experience, Threat intelligence experience, Secure software development experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As a Software Development Manager (SDM) you'll drive the development of advanced security automation and security tooling that fortify our security operations capabilities. You'll manage a team of developers to build scalable solutions that power Incident Response, and Threat Intelligence operations. You'll shape the technical roadmap for security tooling initiatives, collaborate with various security teams to understand operational needs, and translate these into efficient, scalable solutions. Your work will directly impact our organization's security posture by enabling automated response, and improved visibility across our infrastructure. This role requires expertise in security architecture, automation frameworks, and modern development practices. You'll lead the charge in revolutionizing our security operations through tooling and automation solutions. Key job responsibilities (a) Lead by example, innovate and solve security challenges at a massive scale, (b) set measurable goals for delivery by your team, (c) Orchestrate strategy and direction, roadmap planning, and project execution scheduling, (d) Hire, build and manage a cross-functional engineering team, and (e) Create the team environment that your reports rely upon for delivery (f) Streamlining security operations through innovative tooling About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of engineering team management experience - 7+ years of working directly within engineering teams experience - 3+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience - 8+ years of leading the definition and development of multi tier web services experience - Knowledge of engineering practices and patterns for the full software/hardware/networks development life cycle, including coding standards, code reviews, source control management, build processes, testing, certification, and livesite operations - Experience partnering with product or program management teams Preferred Qualifications: - Experience in communicating with users, other technical teams, and senior leadership to collect requirements, describe software product features, technical designs, and product strategy - Experience in recruiting, hiring, mentoring/coaching and managing teams of Software Engineers to improve their skills, and make them more effective, product software engineers - Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 184,900.00 - 250,200.00 USD annually USA, WA, Seattle - 184,900.00 - 250,200.00 USD annually", "summaryDescription" : "Software Development Manager, AWS Security at Amazon.com Services LLC. Skills: Security automation, Security tooling, Scalable solutions. Lead security challenges. Set measurable goals", "postedDate" : "2026-06-13T08:39:45.475", "createdAt" : "2026-06-13T08:39:45.475", "lastUpdated" : "2026-06-15T01:36:46.665", "ingestTimestamp" : "2026-06-13T08:39:45.475", "mongoId" : "69d5e4972beec4dd3d931ac3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10384307/apply", "salaryAnnualMin" : 184900, "salaryAnnualMax" : 250200, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security architecture", "Automation frameworks", "Development practices", "Incident response", "Threat intelligence", "Leadership", "Security automation", "Security tooling", "Scalable solutions", "Roadmap planning", "Project execution", "Security operations", "Modern development practices", "Cloud security", "AI security" ], "skillCount" : 15, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69cf3f072beec4dd3d93423d", "title" : "Sr. Security Engineering Manager", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 208300.0, "max" : 281800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T01:20:11.251", "fingerprint" : "5970f742c0b39285eb6f3b9a80a7e23bdaaa3a825f5ad2218c616fb1809ac14f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10381750/apply", "externalId" : "10744f13-97a1-48c5-ac2f-f53dfe0f2965", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Security engineering, Secure software development, AWS", "professionalSkills" : [ "Risk assessment", "Security architecture", "Business acumen" ], "hardSkillsList" : [ "Security controls", "Risk identification", "Threat modeling" ], "softSkillsList" : [ "Customer obsession", "High judgment", "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk identification", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Customer obsession" }, { "name" : "High judgment" }, { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security engineering management, Secure architecture, Team leadership", "majorSkillsList" : [ "Security engineering management", "Secure architecture", "Team leadership" ], "coreResponsibilities" : "Own security architecture, Enforce secure development, Enable secure development, Protect customer data, Partner with engineering leaders, Reduce friction for builders, Develop services secure by design, Understand customer needs, Address customer needs, Drive adoption of security solutions, Integrate security solutions, Recruit security engineers, Coach security engineers, Develop security engineers, Scale security engineers, Provide strategic oversight, Provide tactical oversight, Maintain motivated team, Maintain innovative team, Maintain effective team, Design secure architecture, Build security controls, Protect customer information, Protect infrastructure, Define groundbreaking products, Lead teams, Deliver services, Deliver software services, Design software services for security, Launch services with high security, Raise security bar, Ensure mechanisms improve security, Ensure metrics improve security, Define long-term security architecture, Deliver innovative ideas, Improve security across services, Hire cybersecurity professionals, Grow cybersecurity professionals, Retain cybersecurity professionals", "teamCollaboration" : "Partner with engineering leaders; Work with customers; Work with partner teams; Work with foundational engineering teams; Cross-functional teams", "domainKnowledge" : "Healthcare security; Secure software development; Amazon Health Services; Cloud-native architecture", "domainList" : [ "healthcare-security", "secure-software-development", "amazon-health-services", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Healthcare security", "Secure software development", "Amazon Health Services", "Cloud-native architecture" ], "communicationSkills" : "Verbal communication; Written communication; Technical concepts communication", "innovationCreativity" : "Invent mechanisms", "qualificationsBasic" : "10+ years industry work, 10+ years security engineering, 10+ years risk assessment, 10+ years team management, 10+ years coaching experience, 10+ years mentoring experience, 10+ years communicating technical concepts, Bachelor's degree in Computer Science", "qualificationsPreferred" : "Threat modeling experience, Risk identification techniques experience, Architecting AWS experience, Securing AWS experience, Operating AWS experience, 10+ years engineering team management, AWS experience, Building software services experience, Building security controls experience, Healthcare industry experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are looking for a Sr. Security Engineering Manager to lead a team of security engineers, developers, and technical program managers. Successful candidates for this position must have experience growing and coaching a highly qualified team of software and security engineers. You must possess strong verbal and written communication skills, be self-driven, and deliver high quality results in a fast-paced environment. You will invent mechanisms that scale to meet broad and diverse needs of Amazon customers and business teams. You will have strong customer obsession, working to deeply understand the needs of your customers and relentlessly looking to improve their experience and make them more productive. The ideal candidate has strong technical knowledge in secure software development, experience designing and implementing security controls for multiple consumer product launches, high judgment to prioritize and address security risks, and experience holding high standards for security controls and work products. We are looking for someone who takes pride in meaningful work that will improve healthcare outcomes for customers. Key job responsibilities - Own the security architecture for products that will enforce and enable secure development of Amazon’s healthcare services and continue to protect customer data. - Partner with engineering leaders in Amazon Health Services to reduce the friction for builders to develop services that are secure by design. - Work closely with your customers, partner teams, and foundational engineering teams to ensure the needs of your customers are clearly understood and effectively addressed. - Drive adoption and integration of Amazon's paved path security solutions across subsidiaries. - Recruit, coach, develop, and scale a team of world class security engineers, providing strategic and tactical oversight to maintain a motivated, innovative, and effective team. A day in the life This position within the Healthcare Security team represents a rare opportunity to get in with a fast-growing business. You will lead teams to design secure architecture and build layers of security controls to protect customer information and our infrastructure. A successful candidate will bring deep technical security and software expertise, strong business acumen, and judgment. You will use your ability to define ground breaking products, hire and lead teams, and demonstrate an ability to work within a fast-moving environment to rapidly deliver services that have broad business impact. In this role, you will lead your team to partner with the engineering teams to deliver software services that are designed for security from the outset and launched with a high security bar. You will continue to raise the security bar of services in production and ensure that there are mechanisms and metrics to improve security. You will define the right long-term security architecture partnering with our engineering leaders, and deliver innovative ideas to improve security across both internal and third-party services that we use to deliver the customer experience. You will need to be an exceptional organizational leader, who can hire, grow and retain a diverse and talented team of cybersecurity professionals to deliver this mission. About the team About Amazon Security Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 10+ years of industry work with hands-on security engineering experience - 10+ years of risk assessment and enabling organizations making security decisions experience - 10+ years of team management and building (including coaching and mentoring) experience - 10+ years of communicating technical concepts to a non-technical audience experience - Bachelor's degree in Computer Science or a related field Preferred Qualifications: - Experience applying threat modeling or other risk identification techniques or equivalent - Experience architecting, securing, and operating Amazon Web Services - 10+ years of engineering team management experience - Experience with AWS - Experience building software services and security controls in the healthcare industry Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 208,300.00 - 281,800.00 USD annually", "summaryDescription" : "Sr. Security Engineering Manager at Amazon.com Services LLC. Skills: Security engineering management, Secure architecture, Team leadership. Own security architecture. Enforce secure development", "postedDate" : "2026-06-13T02:44:02.304", "createdAt" : "2026-06-13T02:44:02.304", "lastUpdated" : "2026-06-15T01:20:11.251", "ingestTimestamp" : "2026-06-13T02:44:02.304", "mongoId" : "69cf3f072beec4dd3d93423d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10381750/apply", "salaryAnnualMin" : 208300, "salaryAnnualMax" : 281800, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security controls", "Risk identification", "Threat modeling", "Customer obsession", "High judgment", "Leadership", "Mentoring", "Security engineering management", "Secure architecture", "Team leadership", "Risk assessment", "Security architecture", "Business acumen", "Healthcare security", "Secure software development", "Amazon Health Services", "Cloud-native architecture" ], "skillCount" : 17, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare" }, { "id" : "68e6b1d470f0b99d58d667b5", "title" : "AWS Security Assurance Services, Practice Manager, UAE, AWS Security Assurance Services", "company" : "Amazon Web Services EMEA Dubai FZ Branch", "industry" : "Systems, Quality, Security Engineering, Professional Services, Cloud Computing", "salary" : { "min" : 455000.0, "max" : 650000.0, "currency" : "AED", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Dubai, UAE, within the Technology industry, adjusted for seniority and full-time employment." }, "location" : "Dubai, ARE", "locations" : [ "Dubai, ARE" ], "timestamp" : "2026-06-15T05:28:59.828", "fingerprint" : "a7ae5e77c8eaa8990a418b28a0257e4b246c97ac940631c5f74f35dd9063166d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3104293/apply", "externalId" : "564d0f94-35e5-4367-a209-19debda1f8dc", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dubai", "country" : "United Arab Emirates", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "25.0742823,55.1885387" } ], "locationText" : "Dubai, United Arab Emirates", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS, IaaS", "professionalSkills" : [ "Risk management", "Compliance management", "Security assurance", "Business development", "IT transformation", "Enterprise architecture" ], "hardSkillsList" : [ "Governance", "Risk", "Compliance", "Security" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Governance", "level" : "intermediate" }, { "name" : "Risk", "level" : "intermediate" }, { "name" : "Compliance", "level" : "intermediate" }, { "name" : "Security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security assurance, Cloud migration, Risk management, Compliance", "majorSkillsList" : [ "Security assurance", "Cloud migration", "Risk management", "Compliance" ], "coreResponsibilities" : "Build high performing teams, Develop strategy, Drive consensus, Deliver security outcomes, Define security approaches, Resolve security assurance questions, Manage risk, Achieve security objectives, Automate compliance, Convey customer feedback, Build customer relationships, Support Business Development, Support Customer Success", "teamCollaboration" : "AWS engineering teams; AWS support teams; AWS business teams; AWS sellers", "projectManagementSkills" : [ "Program management", "Engagement management" ], "domainKnowledge" : "Shared responsibility model; Cloud computing; Cyber security; Compliance; Enterprise risk management; Regulated data; AWS Cloud", "domainList" : [ "shared-responsibility-model", "cloud-computing", "cyber-security", "compliance", "enterprise-risk-management", "regulated-data", "aws-cloud" ], "domainSpecificKnowledge" : [ "Shared responsibility model", "Cloud computing", "Cyber security", "Compliance", "Enterprise risk management", "Regulated data", "AWS Cloud" ], "communicationSkills" : "Strategic presentations; Customer engagement", "specialRequirements" : "Travel to customer sites", "qualificationsBasic" : "10+ years IT consulting/management, 3+ years program/engagement management, Bachelor's degree in Computer Science, Knowledge of IaaS cloud computing transition challenges, Experience in enterprise architecture, Experience managing large-scale enterprise IT projects", "qualificationsPreferred" : "Knowledge of COBIT or ITIL, Experience integrating AWS with on-premise technologies, Experience with C-suite level customer engagement, Experience with design of scalable delivery models", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Global Services, Security (GSS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Security, Governance, Risk, and Compliance leader who can build a team that addresses the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures? The AWS Security Assurance Service team, within GSS, is seeking a talented Practice Manager to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services help operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by developing a high performing team of consultants who help enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements. You will be expected to also work in a Business Development capacity, assisting our AWS sellers to position the value and applicability of your team into customer projects and long-term relationships. We are looking for an innovative security and compliance leader who enjoys establishing strategy and then drives consensus across the team to achieve a vision. Key job responsibilities Expertise – Builds teams that deliver on innovative governance, risk, compliance and security objectives Solutions - Builds a team that can define security, compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster. Delivery – Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve security and compliance objectives while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment. Insights - Lead efforts with AWS engineering, support, and business teams to convey partner and customer feedback as input to AWS technology roadmaps. Ability to travel to customer sites as needed. Relationships – Build long-lasting customer relationships with strategic stakeholders, supporting the Business Development and Customer Success efforts of AWS Security Assurance Services. About the team AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Basic Qualifications: - 10+ years of IT consulting/management with IT Transformation in customer-facing roles experience - 3+ years of program or engagement management work leading other project managers to deliver a program with multiple and concurrent projects experience - Bachelor's degree in Computer Science, Math, or a related field - Knowledge of infrastructure-as-a-service (IaaS) cloud computing transition challenges - Experience in IT consulting/management with IT Transformation in a customer-facing role - Experience in program or engagement management, leading other project managers to deliver a program with multiple and concurrent projects - Experience in enterprise architecture including virtualization technologies & distributed architecture - Experience managing and delivering large-scale enterprise IT projects Preferred Qualifications: - Knowledge of enterprise IT management frameworks like COBIT or ITIL - Experience integrating AWS cloud services with on-premise technologies (e.g., Microsoft, IBM, Oracle, HP, SAP) - Experience with customer relationship management, especially C-suite level customer engagement - Experience with design of modern, scalable delivery models for technology consulting services Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "AWS Security Assurance Services, Practice Manager, UAE, AWS Security Assurance Services at Amazon Web Services EMEA Dubai FZ Branch. Skills: Security assurance, Cloud migration, Risk management, Compliance. Build high performing teams. Develop strategy", "postedDate" : "2026-06-13T11:49:07.079", "createdAt" : "2026-06-13T11:49:07.079", "lastUpdated" : "2026-06-15T05:28:59.828", "ingestTimestamp" : "2026-06-13T11:49:07.079", "mongoId" : "68e6b1d470f0b99d58d667b5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3104293/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Governance", "Risk", "Compliance", "Security", "Leadership", "Security assurance", "Cloud migration", "Risk management", "Compliance management", "Business development", "IT transformation", "Enterprise architecture", "Program management", "Engagement management", "Shared responsibility model", "Cloud computing", "Cyber security", "Enterprise risk management", "Regulated data", "AWS Cloud" ], "skillCount" : 20, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "68c2e412f8b1b0376634c220", "title" : "Security Engineer, AWS Global Services", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Dallas, Texas, USA", "locations" : [ "Dallas, Texas, USA" ], "timestamp" : "2026-06-16T02:15:50.236", "fingerprint" : "3392e875c3aecdd97b186d51b13a88b5b9dcb3ad1bd3555c75bc5b3bde3b9439", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071644/apply", "externalId" : "4623f239-96aa-4999-aa47-0ce9ce373481", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Go, AWS, Cloud security, Security automation, Incident response, Threat modeling, Security architecture, CI/CD, Container security, Infrastructure as code", "professionalSkills" : [ "System design", "Risk assessment", "Security analysis" ], "hardSkillsList" : [ "Security engineering", "Cloud security controls", "Security automation scripting" ], "hardSkills" : [ { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Security automation scripting", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Security engineering, Incident response", "majorSkillsList" : [ "Cloud security", "Security engineering", "Incident response" ], "coreResponsibilities" : "Design and implement security controls, Develop and maintain security automation, Respond to security incidents, Conduct threat modeling exercises, Develop security architecture designs, Collaborate with engineering teams, Improve security posture, Identify and mitigate security risks, Stay current with security threats", "teamCollaboration" : "Engineering teams; Cross-functional teams", "domainKnowledge" : "Cloud security; AWS services; Security best practices; Threat landscape", "domainList" : [ "cloud-security", "aws-services", "security-best-practices", "threat-landscape" ], "domainSpecificKnowledge" : [ "Cloud security", "AWS services", "Security best practices", "Threat landscape" ], "toolProficiency" : [ "AWS security services", "Security tooling" ], "documentationSkills" : "Technical documentation", "continuousLearning" : "Stay current with security threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Improve security posture; Mitigate security risks", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in software development, 3+ years of experience in security engineering, Experience with cloud security controls, Experience with security automation, Experience with incident response, Experience with threat modeling, Experience with security architecture", "qualificationsPreferred" : "Master's degree or PhD in Computer Science or related field, Experience with AWS security services, Experience with security tooling, Experience with programming languages like Python or Go, Experience with CI/CD pipelines, Experience with container security, Experience with infrastructure as code", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale security solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? AWS Security Incident Response Service is seeking a motivated professional who desires to join our global, innovative & high-energy Security team. The right candidate must thrive in high-pressure situations, think like both an attacker & defender, and help relevant teams take the right actions in the right timeframes to mitigate risks. As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Services Security Organization you will have the opportunity to pioneer technically excellent security solutions supporting customer initiatives that are meaningful to their business. As a member of AWS CIRT, you will be able to delight customers with leading edge security incident response via AWS Security Incident Response service and other escalation mechanisms. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. Key job responsibilities • Perform and oversee incident response operations • Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event. • Independently contribute to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities. • Design, build, and deploy solutions to automate security operations and incident response on AWS. • Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers. • Develop high-quality content, such as automation tools, reference architectures, and white papers to help our consultants, partners, and customers build on the work that we deliver. • Innovate on behalf of customers by translating your thoughts into action-oriented results. • Mentor and invest in our employees, partners, and customers to raise the bar for our customers. • Periodic on-call required. A day in the life As a Security Engineer on the proactive side of AWS CIRT, responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team Proactive side of AWS CIRT provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. AWS CIRT enhances existing security capabilities by supporting security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. About AWS Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Completed Bachelor’s Degree in Computer Science, or equivalent experience - Demonstrated experience in a technical field and understanding of security concepts and common security threats in host operating systems (Linux/ Windows), Network security concepts, log analysis and investigation. - Familiarity with at least one functional scripting language (e.g. Python, JavaScript, shell scripting). Preferred Qualifications: - Knowledge of common system security vulnerabilities and remediation techniques. - Understanding of the tools, tactics, and techniques used by threat actors during security events. - Familiarity/experience with AWS services and security concepts. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, AWS Global Services at Amazon Web Services, Inc.. Skills: Cloud security, Security engineering, Incident response. Design and implement security controls. Develop and maintain security automation", "postedDate" : "2026-06-14T19:43:16.913", "createdAt" : "2026-06-14T19:43:16.913", "lastUpdated" : "2026-06-16T02:15:50.236", "ingestTimestamp" : "2026-06-14T19:43:16.913", "mongoId" : "68c2e412f8b1b0376634c220", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071644/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security engineering", "Cloud security controls", "Security automation scripting", "Cloud security", "Incident response", "System design", "Risk assessment", "Security analysis", "AWS services", "Security best practices", "Threat landscape", "AWS security services", "Security tooling" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c5dc974d8ee00a08de8c0", "title" : "Incident Detection/Response Manager (SOC Manager)", "company" : "SkyePoint Decisions", "industry" : "Cybersecurity", "salary" : { "min" : 100000.0, "max" : 120000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "GCIH", "GCFA", "GREM" ], "timestamp" : "2026-06-14T18:54:22.893", "fingerprint" : "a26d854864141b72fd7fdda9b87bab40979eb929aca80323e4f63e8519d0c0a6", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4240175009", "externalId" : "4240175009", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "experienceMinYears" : 8, "experienceLevel" : "Manager", "technicalSkills" : "SIEM, SOAR, EDR, CDM, Malware analysis, AWS native services", "professionalSkills" : [ "Incident response", "Cybersecurity architecture", "Critical infrastructure", "Applications development", "Enterprise-wide solutions", "Mission awareness" ], "hardSkillsList" : [ "Operating systems", "Networking", "Malware analysis" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Operating systems", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident detection, Incident response, SOC management", "majorSkillsList" : [ "Incident detection", "Incident response", "SOC management" ], "coreResponsibilities" : "Manage SOC daily activities, Build schedules, Update documentation, Manage incident response operations, Coordinate containment activities, Coordinate eradication activities, Coordinate recovery activities, Lead post-incident reviews, Lead root cause analysis, Ensure compliance with NIST SP 800-61, Ensure compliance with FSA incident response SOPs, Manage SIEM event dashboards, Maintain coverage schedule, Maintain call tree", "teamCollaboration" : "Partner organizations; CSPs", "projectManagementSkills" : [ "SOPs", "Playbooks", "CONOPS" ], "domainKnowledge" : "Cybersecurity; NIST SP 800-61; Incident response", "domainList" : [ "cybersecurity", "nist-sp-800-61", "incident-response" ], "domainSpecificKnowledge" : [ "Cybersecurity", "NIST SP 800-61", "Incident response" ], "toolProficiency" : [ "SIEM", "SOAR", "EDR", "CDM" ], "communicationSkills" : "Documentation", "documentationSkills" : "SOPs; Playbooks; CONOPS", "continuousLearning" : "Certification incentive program", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Secret clearance, U. S. Citizen", "qualificationsBasic" : "Bachelor's degree, 8+ years IT experience, 4+ years incident response, Active Secret clearance, U. S. Citizen", "qualificationsPreferred" : "GCIH certification, GCFA certification, GREM certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon contract win. SkyePoint Decisions is seeking a Incident Detection/Response Manager (SOC Manager) to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS) in Washington, DC. This is a remote position. Responsibilities: Manages SOC daily activities including building schedules and making sure all documentation such as but not limited to SOPs, Playbooks, CONOPS are up to date. Manages Tiers I/II/III incident response operations. Coordinates containment, eradication, and recovery activities. Leads post-incident reviews and root cause analysis. Ensures compliance with NIST SP 800-61 and FSA incident response SOPs. Manages SIEM event “notables” dashboards. Maintains coverage schedule per shift. Maintains call tree including contact information for all partner organizations and CSPs. Required Qualifications: Bachelor's degree and 8+ years of IT experience with 4+ years in incident response. Must have at least an active Secret clearance. At least one of these certifications: GCIH, GCFA, GREM, among others. Experience with SIEM, SOAR, EDR, CDM, and malware analysis. Experience with operating systems and networking. Experience with AWS native services and tools. Experience managing SOC overseeing complex systems. Must be a U. S. Citizen. Compensation: Salary Range: $100,000-$120,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Incident Detection/Response Manager (SOC Manager) at SkyePoint Decisions. Skills: Incident detection, Incident response, SOC management. Manage SOC daily activities. Build schedules", "postedDate" : "2026-06-12T21:38:51.252", "createdAt" : "2026-06-12T21:38:51.252", "lastUpdated" : "2026-06-14T18:54:22.893", "ingestTimestamp" : "2026-06-12T21:38:51.252", "mongoId" : "6a2c5dc974d8ee00a08de8c0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 100000, "salaryAnnualMax" : 120000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Operating systems", "Networking", "Malware analysis", "Leadership", "Incident detection", "Incident response", "SOC management", "Cybersecurity architecture", "Critical infrastructure", "Applications development", "Enterprise-wide solutions", "Mission awareness", "SOPs", "Playbooks", "CONOPS", "Cybersecurity", "NIST SP 800-61", "GCIH", "GCFA", "GREM", "SIEM", "SOAR", "EDR", "CDM" ], "skillCount" : 24, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity" }, { "id" : "6a25145474d8ee00a00bb3b4", "title" : "AWS Security Controls Specialist", "company" : "Amazon Web Services, Inc.", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T07:25:52.701", "fingerprint" : "b2e6e8b8b8ac163f0fe3817de67d45f349cea6de3ca69413ab4f1746bb524d50", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441354/apply", "externalId" : "b5f75fce-f081-4723-8ef9-376e6574ee89", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Application security, Identity and access, Incident response, Mobile security, Cloud computing, AI security, Threat intelligence, Penetration testing", "professionalSkills" : [ "IT audit", "Risk management", "Process improvement", "Compliance frameworks" ], "hardSkillsList" : [ "Security controls", "IT processes", "Process changes" ], "hardSkills" : [ { "name" : "Security controls", "level" : "intermediate" }, { "name" : "IT processes", "level" : "intermediate" }, { "name" : "Process changes", "level" : "intermediate" } ], "majorSkills" : "Security controls, IT audit, Compliance frameworks", "majorSkillsList" : [ "Security controls", "IT audit", "Compliance frameworks" ], "coreResponsibilities" : "Understand regulatory requirements, Understand commercial IT requirements, Serve as subject-matter expert, Write security controls, Articulate security controls, Update security controls, Write security policies, Articulate security policies, Update security policies, Write security standards, Articulate security standards, Update security standards, Review evidence for key controls, Communicate operational processes, Communicate control implementation, Communicate key risks, Communicate areas of program improvement, Seek diverse opinions, Coordinate improvement efforts, Field requests from auditors, Address requests from auditors, Dive deep into control environment, Develop domain understanding, Develop technical understanding, Articulate compliance to stakeholders, Bridge communication with stakeholders, Bridge communication with technical communities, Articulate control implementation, Operate quality rhythm business, Manage stakeholder expectations", "teamCollaboration" : "Work with builders; Work with divisions; Work with stakeholders; Work with technical communities", "domainKnowledge" : "AWS security controls; External audit frameworks; AWS compliance requirements; AWS operational processes; AWS control environment; AWS control activities", "domainList" : [ "aws-security-controls", "external-audit-frameworks", "aws-compliance-requirements", "aws-operational-processes", "aws-control-environment", "aws-control-activities" ], "domainSpecificKnowledge" : [ "AWS security controls", "External audit frameworks", "AWS compliance requirements", "AWS operational processes", "AWS control environment", "AWS control activities" ], "communicationSkills" : "Articulate to stakeholders; Communicate to leadership; Communicate to auditors", "documentationSkills" : "Document security controls", "innovationCreativity" : "Invent new ways; Drive innovative changes", "problemSolvingSkills" : "Design solutions", "qualificationsBasic" : "Bachelor's degree in Computer Science, 3+ years application security frameworks, 3+ years identity and access controls, 3+ years incident response, 3+ years mobile security, 3+ years cloud computing and security, 3+ years AI security, 3+ years threat intelligence, 3+ years penetration testing, 3+ years process improvement procedures", "qualificationsPreferred" : "Experience with security equipment, Experience in internal audit, Experience in risk management, Application security frameworks experience, Security code reviews experience, Incident response experience, Security infrastructure experience, Penetration testing experience, Mobile security experience, Cloud security experience, AI security experience, Identity and access controls experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Amazon Web Services (AWS), Security is our highest priority. The AWS Security Assurance team is responsible for demonstrating the security controls of services offered by AWS. At AWS' scale, we invent new ways to provide the highest level of assurance to our most security conscious customers. We are looking for a highly motivated security control specialist with IT audit experience to join our team. As part of the team, you will be responsible for supporting developing a security controls product to serve our external audit function. You will understand the key objectives and goals of customers, regulators, and third-party audit frameworks and understand AWS controls that strategically address these goals and objectives, and work with builders to document security controls that fulfills AWS compliance requirements. Additionally, you will be responsible for understanding AWS’ operational processes around controls and be able to clearly articulate and communicate to various stakeholder audiences in a variety of forms. The successful candidate is one who loves working across many stakeholders and compliance frameworks to design solutions for complex compliance challenges. We have a team culture that encourages ownership, diversity, inclusion, and innovation. Our team members and management alike take a high degree of ownership for their program vision and execution of ideas. Our team members balance their unique perspective with those of the diverse perspectives of the team and its stakeholders. You will work directly with divisions within AWS service to improve AWS’ ability to demonstrate assurances for our internal and external customers. In this role, you will facilitate open and transparent relationships with AWS internal stakeholders and customers. We seek an experienced and industry professional who can understand core compliance frameworks, dive deep into IT processes, communicate to auditors, and to be able to drive innovative process changes through multiple organizations and teams. This position can work out of our AWS office in Arlington, VA, Herndon, VA, Seattle, WA, or New York, NY. Key job responsibilities This position will be responsible for the following activities: • Understand regulatory and commercial IT requirements and serve as a subject-matter expert around AWS security controls • Write, articulate, and update security controls and/or security policies and standards and documentation. • Review evidence needed to illustrate the key controls that exist across the AWS environment • Communicate to key stakeholders the operational processes around AWS security practices and how controls are implemented across the environment. • Communicate to leadership key risks and areas of program improvement, as well as seek diverse opinions and coordinate improvement efforts. • Fielding and addressing requests in collaboration with external auditors. • Dive deep into the AWS control environment to develop broad domain and technical understanding of AWS control activities and implementation to articulate compliance to key stakeholders. • Bridge communication with key stakeholders and AWS technical communities to articulate control implementation. • Operate a quality rhythm of the business for managing multiple stakeholder expectations simultaneously. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree in Computer Science, Information Systems, Finance, Accounting, or a related field - 3+ years of any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing experience - 3+ years of process improvement procedures experience Preferred Qualifications: - Experience with security equipment such as intrusion detection devices, access control systems, etc. - Experience in internal audit and risk management or equivalent - Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, NY, New York - 112,200.00 - 196,300.00 USD annually USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually USA, VA, Herndon - 102,000.00 - 178,400.00 USD annually USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "AWS Security Controls Specialist at Amazon Web Services, Inc.. Skills: Security controls, IT audit, Compliance frameworks. Understand regulatory requirements. Understand commercial IT requirements", "postedDate" : "2026-06-13T15:29:44.668", "createdAt" : "2026-06-13T15:29:44.668", "lastUpdated" : "2026-06-15T07:25:52.701", "ingestTimestamp" : "2026-06-13T15:29:44.668", "mongoId" : "6a25145474d8ee00a00bb3b4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441354/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security controls", "IT processes", "Process changes", "IT audit", "Compliance frameworks", "Risk management", "Process improvement", "AWS security controls", "External audit frameworks", "AWS compliance requirements", "AWS operational processes", "AWS control environment", "AWS control activities" ], "skillCount" : 13, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2ca36a74d8ee00a09aba67", "title" : "Sr. Engineering Manager, Application Security", "company" : "Betterment", "industry" : "FinTech", "salary" : { "min" : 225000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Sr. Engineering Manager, Application Security in New York, adjusted for FinTech industry and manager seniority." }, "location" : "61 West 23rd Street, Fifth Floor, New York, New York", "locations" : [ "61 West 23rd Street", "Fifth Floor", "New York", "New York" ], "timestamp" : "2026-06-15T10:05:36.549", "fingerprint" : "64ee120119be432f1bd11d33537e22bf23458dfb18c759dffea72446946acbe7", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.betterment.com/careers/current-openings/job?gh_jid=8000757&gh_jid=8000757", "externalId" : "8000757", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Application security, Secure SDLC, Threat modeling, Secure design review, Code review, Vulnerability management, Cloud-native ecosystem, AWS, Containers, Kubernetes, CI/CD, AI", "professionalSkills" : [ "Roadmap development", "Risk reduction", "Stakeholder management", "Team leadership", "Mentoring" ], "hardSkillsList" : [ "Threat modeling", "Design review", "Vulnerability management", "Secure coding" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Design review", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Application Security, Team Management, Security Programs", "majorSkillsList" : [ "Application Security", "Team Management", "Security Programs" ], "coreResponsibilities" : "Oversee development of paved roads, Build and maintain threat modeling program, Build and maintain design review program, Build and maintain vulnerability management program, Drive adoption of AI across AppSec, Lead and mentor engineers, Establish communication with stakeholders, Inspire engineering culture, Continuously innovate security needs", "teamCollaboration" : "Collaborate with engineering teams; Partner with engineers; Work with product teams; Stakeholders across engineering; Stakeholders across product; Stakeholders across legal; Stakeholders across compliance; Stakeholders across risk", "projectManagementSkills" : [ "Roadmap execution" ], "domainKnowledge" : "Application security; Cloud-native ecosystem; Financial services; Regulated industry", "domainList" : [ "application-security", "cloud-native-ecosystem", "financial-services", "regulated-industry" ], "domainSpecificKnowledge" : [ "Application security", "Cloud-native ecosystem", "Financial services", "Regulated industry" ], "toolProficiency" : [ "AI-assisted security tools" ], "communicationSkills" : "Stakeholder communication", "continuousLearning" : "Professional coaching", "innovationCreativity" : "Continuously innovate", "problemSolvingSkills" : "Security challenges", "outcomesObjectives" : "Reduce risk to Betterment; Empower engineering organization; Deliver value to customers", "qualificationsBasic" : "Expertise across application security stack, Hands-on managing security engineers, Player-coach experience, Experience establishing Security Champions program, Experience leading large team initiatives", "qualificationsPreferred" : "Scaling Security Champions program, Scaling distributed threat modeling program, Familiarity with AI-assisted security tools, Curiosity for AI security workflows", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Betterment Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We’re headquartered in NYC and offer hybrid NY-based positions (four days/ week in-office, with no required office days during the summer and winter holidays). About the Role: As a Senior Engineering Manager leading the Betterment Security team’s Application Security squad, you’ll collaborate closely with engineering teams across the company as your squad helps developers build secure software by default. Your team shapes how Betterment threat models new systems, reviews designs, manages vulnerabilities, and equips engineers with the tools, libraries, and guardrails that make the secure path the easy path. You’ll work with team and company leadership to develop and drive a mission-aligned roadmap and manage its execution with your team. You’ll also partner with engineers on your team and beyond to identify and advocate for the work that will most meaningfully reduce risk to Betterment and our customers. You’ll play a crucial role in balancing proactive security investments alongside response and remediation, all while helping mentor and grow a team of amazing engineers. At Betterment, security is foundational to the trust our customers place in us with their financial lives. Our Application Security squad empowers and enables the entire engineering organization and works closely with product and platform teams to deliver controls, tooling, and partnerships that let us deliver value to Betterment’s customers and clients without compromising on safety. Members of this team have a love for solving interesting security challenges and improving the lives of our developers in ways that move our engineering organization and the business forward. You’ll be a part of a team that’s tackling difficult questions of secure design at scale in a deeply regulated industry where the stakes are real. This role is based out of our NYC office. Below we've reflected the base salary range for this position. Actual salaries may vary depending on factors including but not limited to location, experience, and performance. The range listed is just one component of Betterment’s total compensation package for employees. New York City: $210,000-250,000 This job may also be eligible for variable compensation in the form of a company incentive bonus. A Day in the Life: Oversee the development of paved roads, libraries, and guardrails that make it easier for our developers to commit, test, build, deploy, and operate code securely by default. Build and maintain the threat modeling, design review, and vulnerability management programs that protect our customers, our employees, and the business. Drive the adoption of AI across AppSec operations to achieve scaled security workflows, creating leverage for senior engineers. Lead and mentor engineers on Betterment’s senior-leaning AppSec squad. Establish strong lines of communication with stakeholders across engineering, product, legal, compliance, and risk to understand and deeply support the needs of teams building products across all business lines and divisions of Betterment. Inspire and maintain a strong, equitable engineering culture founded on transparency, inclusivity, mentorship, and collaboration. Continuously innovate and seek out ways to meet the near- and long-term strategic security needs of our complex org. What We’re Looking For: Expertise across the application security stack: secure SDLC, threat modeling, secure design review, code review, vulnerability management, and the cloud-native ecosystem (AWS, containers, Kubernetes, CI/CD). Experience with hands-on managing, mentoring, and inspiring a team of talented security engineers, including senior engineers. Demonstrated success as a true player-coach is a must. Experience establishing or scaling a Security Champions or distributed threat modeling program, with a focus on empowering engineering squads to own security outcomes and integrating these practices into the existing software development lifecycle. Experience leading execution of large team initiatives and execution of smaller concurrent projects in partnership with senior engineers. Familiarity with AI-assisted security tools and a curiosity for exploring how AI can enhance both security workflows and the security posture of the AI-powered features our engineers are building. A real passion for application security and for empowering developers to do the right thing easily. Experience collaborating with other engineering teams, product managers, subject matter experts, and non-technical stakeholders such as legal, compliance, and risk. Join a team built on these core values We change lives Be a part of a community of innovators working to transform financial outcomes for real people. Your work will make an impact, always laddering up to our mission; to empower people to build wealth with confidence and ease. We set audacious goals We set them for the company, our customers, and ourselves, and we won’t stop until we reach them. We don’t just show up; we give our all, then celebrate our wins. We value all perspectives When we collaborate, we're at our best. We believe diverse perspectives lead to better outcomes and strive to uphold our supportive and inclusive community. We simplify financial services We’re financial services pioneers, always finding new ways to improve, optimize, and enhance. Constant improvement is in our DNA. Our Commitment to Your Total Well-being: We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options Ownership: Equity for all employees, including new hire and refresher grants. Time: Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year. Growth: Company-paid professional coaching for all employees. Wealth: Day-one 401(k) match plus matching on qualified student loan payments. What happens next We’ll take a few weeks to review all applications. If we’d like to spend more time with you, we’ll reach out to arrange next steps, which will include 3-4 sets of meetings with your future colleagues. In the interview process, we’ll look to learn more about your skills, experiences, capabilities, and motivators. Many of our questions will be aimed at understanding how you might operate here at Betterment. Depending on the role, we may ask you to complete a case study exercise or technical assessments, as we want to collect a robust set of data points to better inform our decisions. On average, it takes us around 3-5 weeks to make a hiring decision, depending on your availability and sense of urgency. As a best practice, we aim to interview at least 2-3 final round candidates before making a hiring decision. Please note that, as we usually receive an overwhelming number of applications for open positions, we’re unable to offer individual feedback during the interview process. We recognize that interviewing for a new role is a big deal. We appreciate you considering Betterment as the next step in your career, and our Recruiting Team is here to support and advocate for you through the interview process! Betterment is dedicated to providing accommodations to candidates upon request. If you need accommodations at any point throughout the interview process, please reach out to your recruiter. Please note that in any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Come join us! We’re an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, religion, creed, national origin or ancestry, ethnicity, sex, gender (including gender nonconformity and status as a transgender or transsexual individual), sexual orientation, marital status, age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, predisposing genetic characteristic, domestic violence victim status, arrest records, or any other characteristic protected under applicable federal, state or local law.", "summaryDescription" : "Sr. Engineering Manager, Application Security at Betterment. Skills: Application Security, Team Management, Security Programs. Oversee development of paved roads. Build and maintain threat modeling program", "postedDate" : "2026-06-13T21:44:41.651", "createdAt" : "2026-06-13T21:44:41.651", "lastUpdated" : "2026-06-15T10:05:36.549", "ingestTimestamp" : "2026-06-13T21:44:41.651", "mongoId" : "6a2ca36a74d8ee00a09aba67", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 225000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Threat modeling", "Design review", "Vulnerability management", "Secure coding", "Leadership", "Mentoring", "Application Security", "Team Management", "Security Programs", "Roadmap development", "Risk reduction", "Stakeholder management", "Team leadership", "Roadmap execution", "Application security", "Cloud-native ecosystem", "Financial services", "Regulated industry", "AI-assisted security tools" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307f23f292fd229c0558df", "title" : "Software Engineering Manager, Open Source Security", "industry" : "Cybersecurity", "salary" : { "min" : 185000.0, "max" : 275000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Software Engineering Manager in Singapore, adjusted for the technology industry and manager seniority." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T10:45:24.948", "fingerprint" : "0cd8e8737455fec6838eac5f18641581c54bf8e63840e59aa9a6d84041f5124b", "source" : "google", "language" : "en", "externalId" : "117771288960737990", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceLevel" : "Manager", "remoteFriendly" : false, "summaryDescription" : "Software Engineering Manager, Open Source Security", "postedDate" : "2026-06-16T01:49:52.530", "createdAt" : "2026-06-16T01:49:52.530", "lastUpdated" : "2026-06-16T10:45:24.948", "ingestTimestamp" : "2026-06-16T01:49:52.530", "mongoId" : "6a307f23f292fd229c0558df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69e104422beec4dd3def287d", "title" : "Sr. Security Services SA, AWS Security Services SA - EMEA", "company" : "AWS EMEA SARL (UK Branch)", "industry" : "Solutions Architect, Solution Architect, Cloud Computing", "salary" : { "min" : 115000.0, "max" : 175000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Security Services SA in London, UK, adjusted for industry and company size." }, "location" : "London, England, GBR", "locations" : [ "London, England, GBR" ], "timestamp" : "2026-06-16T03:32:00.387", "fingerprint" : "47711814535110939e34e0ba8a8f4d20cab976dfe0940dfff92f0eebecacc76d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385978/apply", "externalId" : "a0d71a4a-b880-4803-87e7-4930d9a55ac4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "AWS Global Sales drives adoption of the AWS cloud worldwide, enabling customers of all sizes to innovate and expand in the cloud. Our team empowers every customer to grow by providing tailored service, unmatched technology and support. We dive deep to understand each customer's unique challenges, then craft innovative solutions that accelerate their success. This customer-first approach is how we built the world's most adopted cloud. Join us and help us grow. AWS is building a new team focused on driving customer adoption of AWS security services - and we're looking for a senior technical specialist to help define what great looks like from day one. Customers are moving fast, especially into generative AI and agentic architectures, and they need help doing that securely. At the same time, they want to get more from the AWS security services they already own and adopt new ones with confidence. That gap is where this team lives. As a Sr. Solutions Architect on the Security Services team, you will work directly with enterprise customers to design, adopt, and operationalize AWS security services at scale. You won't just advise - you'll own the technical relationship, architect the solutions, and stay engaged through adoption. You'll work alongside a paired security services seller as a technical and commercial unit, and you'll bring what you learn back to AWS product teams to shape the roadmap. This is a founding role on a new team. The playbooks don't exist yet. You'll help write them. Key job responsibilities - Own the end-to-end technical relationship with a portfolio of enterprise customers, guiding their adoption of AWS security services including Security Hub, GuardDuty, Amazon Inspector, and Amazon Detective - Architect solutions to complex security problems where the technology strategy is not yet defined - helping customers move from intent to implementation with confidence - Work as a paired technical and commercial unit with a security services seller, driving service adoption and measurable customer outcomes together - Help customers secure their generative AI and agentic architectures, meeting them where they are and helping them move faster without sacrificing their security posture - Serve as the voice of the customer back to AWS security product teams - surface field patterns, identify gaps, and translate that feedback into clear requirements that shape the roadmap - Build and maintain relationships with AWS Partners to design and deliver architectures that combine AWS-native security services with best-in-class partner solutions - Produce thought leadership that scales your impact beyond individual engagements - blogs, reference architectures, workshops, and conference sessions that help customers and the field community - Partner with AWS Account Teams and security strategy roles to connect service adoption to broader security transformation at customers A day in the life No two days look the same in this role. You might start the morning reviewing a customer's detection and response architecture - mapping out how Security Hub and GuardDuty fit into their existing tooling and where the gaps are. Mid-morning, you join a call with your paired seller to align on an account plan for an enterprise customer consolidating third-party security tooling onto AWS. You draft a few notes on a pattern you've seen across three customers that the product team should know about. In the afternoon, you run a workshop with a customer's security engineering team - walking through how to operationalize Security Hub findings at scale. You wrap the day reviewing a draft reference architecture you've been building for securing agentic workloads, something you plan to publish as a blog post next month. Through all of it, you're doing the work directly. You're the technical expert in the room, and customers know it. About the team The team's mission is to accelerate customer adoption of AWS security services by pairing deep technical expertise with a commercial go-to-market motion alongside security services sellers. You will work closely with AWS Account Teams, security strategy roles, and AWS Partners to help customers build confident, secure operations on AWS. The customers you serve are navigating real complexity - they're adopting generative AI, rethinking identity and access models, and trying to keep pace with a threat environment that evolves daily. This team exists to help them do all of that on AWS. Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 8+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience - 3+ years of design, implementation, or consulting in applications and infrastructures experience - 10+ years of IT development or implementation/consulting in the software or Internet industries experience Preferred Qualifications: - 5+ years of infrastructure architecture, database architecture and networking experience - Experience working with end user or developer communities - Experience securing generative AI or agentic workloads, or a strong point of view on how security models need to evolve for AI-native architectures Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Sr. Security Services SA, AWS Security Services SA - EMEA at AWS EMEA SARL (UK Branch)", "postedDate" : "2026-06-14T19:31:02.748", "createdAt" : "2026-06-14T19:31:02.748", "lastUpdated" : "2026-06-16T03:32:00.387", "ingestTimestamp" : "2026-06-14T19:31:02.748", "mongoId" : "69e104422beec4dd3def287d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385978/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3089aaf292fd229c094821", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.5E7, "max" : 5.0E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-16T10:11:45.575", "fingerprint" : "65df1f71ef24fcafefd9c420b9edd4eb5708b68d7f9ce438053fd226a38910ba", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132277150--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000132277150", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python, Panther SIEM", "professionalSkills" : [ "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation" ], "hardSkillsList" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "SOAR automation", "level" : "intermediate" }, { "name" : "Incident response workflows", "level" : "intermediate" }, { "name" : "API integrations", "level" : "intermediate" }, { "name" : "Scripting for automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response Automation, SOAR Platform Development, Security Operations", "majorSkillsList" : [ "Incident Response Automation", "SOAR Platform Development", "Security Operations" ], "coreResponsibilities" : "Build SOAR automated response platform, Maintain SOAR automated response platform, Support AI-enabled response, Route escalations to personnel, Build automated SOC response tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team, Respond to security incidents", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Fintech industry; Regulated industry environment; SOC response; SIEM; SOAR; APIs; AI/LLM response automation; DLP design; DLP tuning", "domainList" : [ "fintech-industry", "regulated-industry-environment", "soc-response", "siem", "soar", "apis", "ai-llm-response-automation", "dlp-design", "dlp-tuning" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "English fluency; Effective communication", "continuousLearning" : "Desire to learn AI/LLM", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response team support, Occasional off-hours support", "qualificationsBasic" : "Excellent English fluency/proficiency, SOC response experience, Experience in a fintech industry, Experience in a highly regulated industry, Experience working in a lean team, Experience working in a fast-paced technical environment, Experience designing SIEM findings, Experience implementing SIEM findings, Experience tuning SIEM findings, Experience designing SOAR findings, Experience implementing SOAR findings, Experience tuning SOAR findings, Experience configuring advanced automations, Experience with APIs, Understanding of APIs, API integrations experience, Ability to set up API connections, Using APIs to access/retrieve data, Experience with scripting for automation, Experience in data management, Experience in data manipulation, Experience in data presentation", "qualificationsPreferred" : "Python for scripting experience, AI/LLM response automation experience, DLP design experience, DLP tuning experience, Panther SIEM experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response Automation, SOAR Platform Development, Security Operations. Build SOAR automated response platform. Maintain SOAR automated response platform", "postedDate" : "2026-06-15T19:59:33.000", "createdAt" : "2026-06-16T01:45:15.499", "lastUpdated" : "2026-06-16T10:11:45.575", "ingestTimestamp" : "2026-06-16T01:45:15.499", "mongoId" : "6a3089aaf292fd229c094821", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation", "Negotiation", "Incident Response Automation", "SOAR Platform Development", "Security Operations", "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation", "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning", "Torq", "Tines", "Google Sheets", "Excel" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3060ccf292fd229cf93a10", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.25E7, "max" : 4.55E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-16T13:03:37.150", "fingerprint" : "76d028ed9af96dea94a9ff7e0eb7d88b281ee92b2753cad916513ae94d7f099c", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132277150--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000132277150", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python, Panther SIEM", "professionalSkills" : [ "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation" ], "hardSkillsList" : [ "Scripting for automation", "API integrations" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "Scripting for automation", "level" : "intermediate" }, { "name" : "API integrations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response Automation, SOAR Platform Development, SIEM Tuning", "majorSkillsList" : [ "Incident Response Automation", "SOAR Platform Development", "SIEM Tuning" ], "coreResponsibilities" : "Build SOAR automated response platform, Maintain SOAR automated response platform, Support AI-enabled response, Route escalations to on-call personnel, Build automated SOC response tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team, Respond to security incidents", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Fintech industry; Regulated industry environment", "domainList" : [ "fintech-industry", "regulated-industry-environment" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry environment" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "English fluency", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response team support, Off-hours support", "qualificationsBasic" : "Excellent English fluency/proficiency, SOC response experience, Experience in a fintech industry, Experience in a highly regulated industry, Experience working in a lean team, Experience working in a fast-paced technical environment, Experience designing SIEM findings, Experience implementing SIEM findings, Experience tuning SIEM findings, Experience designing SOAR findings, Experience implementing SOAR findings, Experience tuning SOAR findings, Experience configuring advanced automations, Experience with APIs, Understanding of APIs, API integrations experience, Ability to set up API connections, Using APIs to access/retrieve data, Experience with scripting for automation, Experience in data management, Experience in data manipulation, Experience in data presentation, Experience using data in Google Sheets, Experience using data in Excel, Experience using data in databases", "qualificationsPreferred" : "Experience using Python for scripting, Experience with AI/LLM response automation, Desire and willingness to learn AI/LLM, Experience with DLP design, Experience with DLP tuning, Experience with Panther SIEM", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response Automation, SOAR Platform Development, SIEM Tuning. Build SOAR automated response platform. Maintain SOAR automated response platform", "postedDate" : "2026-06-15T19:59:33.000", "createdAt" : "2026-06-16T00:16:53.445", "lastUpdated" : "2026-06-16T13:03:37.150", "ingestTimestamp" : "2026-06-16T00:16:53.445", "mongoId" : "6a3060ccf292fd229cf93a10", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting for automation", "API integrations", "Negotiation", "Incident Response Automation", "SOAR Platform Development", "SIEM Tuning", "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation", "Fintech industry", "Regulated industry environment", "Torq", "Tines", "Google Sheets", "Excel" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2176dc74d8ee00a0c1b299", "title" : "Assurance Program Manager, AWS Compliance & Security Assurance", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 119300.0, "max" : 208900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "timestamp" : "2026-06-16T02:48:56.736", "fingerprint" : "4d9802b1157866f49ce29b4e50e7f2d03cd4b8a1398af2259718e4ff31091156", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10437758/apply", "externalId" : "62b3abf4-b637-4e49-962e-4e67d636ccfb", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Cloud computing", "professionalSkills" : [ "Program management", "Risk management", "Security assurance", "Compliance management", "Stakeholder management", "Cross-functional leadership" ], "hardSkillsList" : [ "Audit processes", "Regulatory requirements" ], "hardSkills" : [ { "name" : "Audit processes", "level" : "intermediate" }, { "name" : "Regulatory requirements", "level" : "intermediate" } ], "majorSkills" : "Program management, Compliance, Security assurance", "majorSkillsList" : [ "Program management", "Compliance", "Security assurance" ], "coreResponsibilities" : "Develop and execute program plans, Manage program risks and issues, Coordinate with internal and external stakeholders, Ensure program deliverables meet quality standards, Communicate program status to leadership, Drive continuous improvement of program processes, Manage program budgets and resources, Ensure compliance with relevant regulations and standards", "teamCollaboration" : "Cross-functional teams; Internal stakeholders; External stakeholders", "projectManagementSkills" : [ "Program management", "Risk management", "Budget management", "Resource management" ], "domainKnowledge" : "AWS compliance; Security assurance; Risk management frameworks; Audit processes; Regulatory requirements", "domainList" : [ "aws-compliance", "security-assurance", "risk-management-frameworks", "audit-processes", "regulatory-requirements" ], "domainSpecificKnowledge" : [ "AWS compliance", "Security assurance", "Risk management frameworks", "Audit processes", "Regulatory requirements" ], "communicationSkills" : "Program status reporting", "problemSolvingSkills" : "Risk mitigation; Issue resolution", "outcomesObjectives" : "Deliver successful compliance and security assurance programs; Ensure adherence to security standards; Improve program efficiency and effectiveness", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of program management experience, Experience managing complex, cross-functional programs, Experience with compliance and security programs, Experience with cloud computing environments", "qualificationsPreferred" : "Master's degree or PhD, Experience in AWS compliance and security, Experience with security assurance frameworks, Experience with risk management frameworks, Experience with audit processes, Experience with regulatory requirements", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "Are you passionate about delivering security assurance at scale and see compliance as a business enabler? Amazon Web Services (AWS) is looking for a Senior Compliance Program Manager to join our Third-Party Assurance team within AWS Security Assurance. In this role, you will own and drive the delivery of AWS's SOC compliance programs, ensuring that AWS continues to meet the highest standards of security and compliance that our customers depend on. You will partner with independent external auditors, AWS service teams, and internal compliance stakeholders to manage the full audit lifecycle from planning and evidence collection through execution, reporting, and continuous improvement. You will serve as the bridge between technical teams and auditors, translating complex control implementations into clear, structured compliance narratives. This role requires a technically experienced compliance professional who can dive deep into cloud infrastructure controls, communicate effectively with both auditors and engineers, and drive process improvements that scale across a rapidly growing portfolio of services and compliance programs. Key job responsibilities Own end-to-end delivery of SOC audit engagements, managing scope, timelines, evidence collection, auditor coordination, and report issuance to achieve clean opinions on schedule. Serve as the primary liaison between independent external auditors and AWS control owners, articulating control design and operating effectiveness, managing auditor inquiries, and coordinating walkthroughs and interviews. Drive the SOC control lifecycle, evaluating new controls for onboarding, managing material control changes, coordinating remediation of findings, and maintaining evidence baseline packages for cross-program reuse. Develop deep technical understanding of AWS's control environment, including infrastructure security, change management, access controls, encryption, and physical security, and translate that understanding into compliance narratives auditors can rely on. Reduce builder burden by streamlining evidence collection, consolidating overlapping auditor requests across programs, and investing in automation and self-service evidence mechanisms. Monitor evolving audit standards and industry frameworks (AICPA Trust Services Criteria, SSAE 18) and proactively assess impact on AWS's control environment and reporting obligations. Drive continuous improvement by identifying opportunities to strengthen controls, improve audit efficiency, and enhance the quality and reusability of evidence across SOC, ISO, PCI, and other compliance programs. Communicate program status, risks, and outcomes to senior leadership with clarity and precision, including assessment progress, remediation tracking, and strategic roadmap updates. Partner cross-functionally with internal security, compliance, engineering, and legal teams to ensure alignment across the compliance portfolio. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - Bachelor's Degree in Accounting, Auditing, Information Systems Management, Computer Science, Informatics, or related field - 7+ years of experience in security or compliance consulting/advisory work in support of a highly technical environment - 7+ years of experience performing and/or participating in technical assessments in direct support of a major compliance effort (e.g., SOC 1, SOC 2, PCI, HITRUST, or ISO) Preferred Qualifications: - 7+ years of HR, privacy, legal, compliance or risk management experience - Experience managing SOC 1 and/or SOC 2 audit programs end-to-end (planning, fieldwork, evidence collection, auditor engagement, report issuance) - Experience working directly with external auditors or as an auditor, with a detailed understanding of evaluating the design and operating effectiveness of IT controls - Experience in cloud technologies, deployment models (IaaS/PaaS/SaaS), familiarity with AWS core services (EC2, S3, KMS, etc.), and auditing cloud environments - Experience engaging builder/engineering teams in defining technical requirements and seeing them through to development and release - Experience building certification roadmaps based on customer requirements and ensuring committed assessments are delivered on schedule - Experience in IT program/project management, IT auditing, and/or control framework development and implementation - Professional certifications: CISA, CISSP, CPA, or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 119,300.00 - 208,900.00 USD annually USA, WA, Seattle - 119,300.00 - 208,900.00 USD annually", "summaryDescription" : "Assurance Program Manager, AWS Compliance & Security Assurance at Amazon.com Services LLC. Skills: Program management, Compliance, Security assurance. Develop and execute program plans. Manage program risks and issues", "postedDate" : "2026-06-14T19:51:22.785", "createdAt" : "2026-06-14T19:51:22.785", "lastUpdated" : "2026-06-16T02:48:56.736", "ingestTimestamp" : "2026-06-14T19:51:22.785", "mongoId" : "6a2176dc74d8ee00a0c1b299", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10437758/apply", "salaryAnnualMin" : 119300, "salaryAnnualMax" : 208900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Audit processes", "Regulatory requirements", "Program management", "Compliance", "Security assurance", "Risk management", "Compliance management", "Stakeholder management", "Cross-functional leadership", "Budget management", "Resource management", "AWS compliance", "Risk management frameworks" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "manager security engineering aws security incident response jobs", "metadata" : { "title" : "manager security engineering aws security incident response" }, "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 184993, "totalPages" : 3700, "hasNext" : true, "hasPrevious" : false } }

Remote Manager Security Engineering Aws Security Incident Response Jobs

Top Skills

Security Incident Response Manager

Senior Security Engineer, AWS Security Incident Response

Security Engineer, AWS Security Incident Response

AWS Security Operations/Incident Response Engineer

Security Engineer II, Security Incident Response Team (SIRT)

AWS Security Operations/Incident Response Engineer

Security Operations and Incident Response Manager

Security Incident Response Lead

Senior Security Incident Response Engineer

Senior Incident Response Specialist, Cyber Security

Security Engineer, Incident Response, CorpSec

Security Engineering Manager, AWS Foundational & Hardware Security

Security Engineering Manager (Cloud Security)

Security Engineering Manager (Cloud Security)

Sr. Security Engineer, AWS Cloud Security Response

Senior Incident Response Engineer, Devices & Services Security

Project Manager, Incident Response

Security Software Dev Engineer II, AWS Security Corporate Response

Security Software Dev Engineer II, AWS Security Corporate Response

Incident Response Lead

Project Manager (Incident Response)

Engineering Manager, Security

Manager, Infrastructure Security Engineering

Manager, Infrastructure Security Engineering

Security Software Dev Engineer II, AWS Security Corporate Response

Security Engineer, Detection and Response

Manager, Security Engineering

Assistant Manager, Cybersecurity Incident Response

Senior Security Engineer, Product Security Engineering

Cybersecurity Manager (Incident Response & Security Operations)

Security Engineer, Detection and Response

Customer Incident Response Program Manager

Director Security Engineering

AWS Security Assurance Services, Practice Manager, Saudi Arabia, AWS Security Assurance Services

Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT)

AWS Security Korea CISO, AWS Compliance & Security Assurance

Senior Information Security Engineer, Product Security Engineering

Security Manager

Software Development Manager, AWS Security

Sr. Security Engineering Manager

AWS Security Assurance Services, Practice Manager, UAE, AWS Security Assurance Services

Security Engineer, AWS Global Services

Incident Detection/Response Manager (SOC Manager)

AWS Security Controls Specialist

Sr. Engineering Manager, Application Security

Software Engineering Manager, Open Source Security

Sr. Security Services SA, AWS Security Services SA - EMEA

[8NW] Senior SecOps Incident Response Automation Engineer

[8NW] Senior SecOps Incident Response Automation Engineer

Assurance Program Manager, AWS Compliance & Security Assurance

Related Searches

All Manager Security Engineering Aws Security Incident Response Jobs by City

More Remote Jobs

Common Questions