{ "count" : 102753, "data" : [ { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 3237.0715, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 1844.617, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145474d8ee00a00bb3b2", "title" : "Senior Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services Japan GK", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "JPY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Tokyo, Japan, adjusted for AWS's size and the technology industry." }, "location" : "Tokyo, JPN", "locations" : [ "Tokyo, JPN" ], "certifications" : [ "GCIH", "GSEC", "GREM", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T08:24:56.602", "fingerprint" : "a57d3db022abec12088d7bb9660b2ed2ff73f018f6b5050988fd19a160c05a1a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "externalId" : "79b6888c-343c-4289-bbab-a95d6a41e1f2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tokyo", "country" : "Japan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "35.6768601,139.7638947" } ], "locationText" : "Tokyo, Japan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, C++, AWS, Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM", "professionalSkills" : [ "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations" ], "hardSkillsList" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Command line tools", "level" : "intermediate" }, { "name" : "Security issue identification", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Incident Response, Automation, AI Feedback Loops, Detection Engineering", "majorSkillsList" : [ "Security Incident Response", "Automation", "AI Feedback Loops", "Detection Engineering" ], "coreResponsibilities" : "Build automation mechanisms, Investigate complex security incidents, Build frameworks for scalable detection, Build frameworks for auto-remediation, Architect AI feedback loops, Respond to threats, Build detection enhancements, Build auto-remediation playbooks, Build AI training pipelines, Lead incident response for customers, Scope blast radius, Coordinate containment, Guide remediation, Walk customers through compromises, Build pipelines to capture investigation patterns, Translate patterns into detection rules, Translate patterns into auto-remediation, Measure impact on investigation volume, Measure impact on investigation accuracy, Build mechanisms for engineer contribution, Build AI feedback loops, Improve autonomous investigation accuracy, Define and track metrics, Measure automation effectiveness, Reduce false positives, Increase auto-resolution coverage, Track engineer contribution rates, Mentor junior engineers, Structure artifacts as reusable automation inputs, Participate in on-call rotations, Review automation dashboard metrics, Investigate new attack patterns, Analyze malware behavior, Extract indicators, Build detection rules, Step into high-severity incidents, Analyze logs, Correlate indicators across accounts, Codify attack chains, Improve AI agent performance, Review and approve detection rule contributions", "teamCollaboration" : "Cross-functional teams; Leadership collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Attack patterns; Supply chain attacks; Cryptomining; Cloud-native architecture; Security operations", "domainList" : [ "attack-patterns", "supply-chain-attacks", "cryptomining", "cloud-native-architecture", "security-operations" ], "domainSpecificKnowledge" : [ "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "Security operations" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Customer calls; Executive presentations", "continuousLearning" : "One-on-one coaching", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decision making", "specialRequirements" : "On-call rotation, 24/7 follow-the-sun operating model", "outcomesObjectives" : "Reduce false positives; Increase auto-resolution coverage; Improve autonomous investigation accuracy", "qualificationsBasic" : "5+ years scripting, programming, or security code review, Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, Speak, write, and read fluently in Japanese, 5+ years troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans, Experience in industry-based security vulnerabilities identification, attack patterns, and remediation, Experience as a mentor, tech lead, or leading an engineering team", "qualificationsPreferred" : "Master's degree in Computer Science, Information Security, or a related field, Experience in automation or monitoring frameworks, deployment or development, Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent), Experience with AWS services in a security operations context", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for a Senior Security Engineer who builds the automation mechanisms that scale security response. You will investigate complex security incidents hands-on, build the frameworks that turn investigation expertise into scalable detection and auto-remediation, and architect the AI feedback loops that make the service smarter with every investigation. The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve over 90% of routine investigations within minutes. The next challenge is building the mechanisms that accelerate this further — enabling every engineer on the team to contribute to detection and automation quality from their investigation work. Your deep understanding of how attacks work — from initial exploitation through lateral movement to data exfiltration — is what makes your automation effective. You will build detection enhancements, auto-remediation playbooks, and AI training pipelines that catch real threats, not just generate noise. We treat every investigation as a confirmed security incident until the data proves otherwise. Native Japanese language skills and fluent English language skills in speaking, reading, and writing. Key job responsibilities - Investigate and respond to complex security incidents hands-on — applying malware analysis, forensic analysis, or attribution skills to credential compromise, data exfiltration, supply chain attacks, and cryptomining - Lead incident response for customers during high-severity events: scope blast radius, coordinate containment, guide remediation, and get on calls with customers to walk them through what was compromised and the specific steps to contain the threat - Own the response-to-automation flywheel: build pipelines that capture investigation patterns (including Trust & Safety abuse cases), translate them into detection rules and auto-remediation, and measure impact on investigation volume and accuracy - Build mechanisms that enable every engineer on the team to contribute detection rules, automation playbooks, and AI training data — and build the AI feedback loops that ensure human corrections systematically improve autonomous investigation accuracy - Define and track metrics that measure automation effectiveness: false positive reduction, auto-resolution coverage, and engineer contribution rates to the pipeline - Mentor junior engineers on investigation methodology and structuring artifacts as reusable automation inputs - Participate in on-call rotations as part of the 24/7 follow-the-sun operating model, including weekends A day in the life - Review automation dashboard metrics: AI agent resolution rates, false positive trends, and engineer-submitted detection rules going live - Investigate new attack patterns the AI is struggling with — analyze malware behavior, extract indicators, and build detection rules that catch the pattern without generating false positives - Step into high-severity incidents directly — analyzing logs, correlating indicators across accounts, scoping blast radius, and getting on a call with the customer to guide containment - Codify attack chains from investigations into detection rules and AI agent improvements so the system catches the pattern autonomously next time - Review and approve detection rule contributions from junior engineers using your contribution framework About the team The AWS Security Incident Response team provides 24/7 threat monitoring, investigation, and response for customer AWS environments. The team is driving a strategic transformation — raising operational standards, building AI-powered investigation capabilities, and expanding coverage. We respond to customer requests within minutes. Zero queue tolerance is the operating standard. We value engineers who solve root causes over those who close tickets. Senior engineers enjoy close collaboration with leadership, one-on-one coaching, and the opportunity to shape the future of security operations at AWS scale. Basic Qualifications: - 5+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - Speak, write, and read fluently in Japanese - 5+ years of non-internship experience in troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques; including experience as a mentor, tech lead, or leading an engineering team Preferred Qualifications: - Master's degree in Computer Science, Information Security, or a related field - Experience in automation or monitoring frameworks, deployment or development - Knowledge of compliance and security standards across the enterprise IT landscape - * Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent) - * Experience with AWS services in a security operations context (Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Engineer, AWS Security Incident Response at Amazon Web Services Japan GK. Skills: Security Incident Response, Automation, AI Feedback Loops, Detection Engineering. Build automation mechanisms. Investigate complex security incidents", "postedDate" : "2026-06-13T18:41:50.371", "createdAt" : "2026-06-13T18:41:50.371", "lastUpdated" : "2026-06-15T08:24:56.602", "ingestTimestamp" : "2026-06-13T18:41:50.371", "mongoId" : "6a25145474d8ee00a00bb3b2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation", "Mentoring", "Security Incident Response", "AI Feedback Loops", "Detection Engineering", "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations", "Roadmap planning", "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "GCIH", "GSEC", "GREM", "GCFA", "CISSP", "AWS" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1429.8118, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68b706967fc9a711f0f6f106", "title" : "Senior Security Incident Response Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:15:22.523", "fingerprint" : "557fc71c43f8425ad3ede7e1896c755a137ec1863b4d9868b798c7018c19161b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3054814/apply", "externalId" : "9b21d22c-d0c3-4bd6-9b1b-3f576fbb97c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Malware analysis, Forensics, Security operations, Incident response, Security automation, Cloud computing, AWS", "professionalSkills" : [ "Security engineering", "Threat landscape", "Security automation tooling" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention" ], "softSkillsList" : [ "Creative problem solving", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Programmatic automation", "level" : "intermediate" }, { "name" : "Security issue prevention", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative problem solving" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security automation, Cloud security", "majorSkillsList" : [ "Incident response", "Security automation", "Cloud security" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities, Design and build tooling, Enable programmatic automation, Lead security engineer, Provide security guidance, Provide technical guidance, Influence process and priorities, Improve security outcomes, Provide strategic guidance, Bar raise security issues, Escalate security issues, Identify prevention opportunities, Mentor junior engineers, Develop junior engineers", "teamCollaboration" : "Global team environment; Multiple security teams; Cross-functional teams", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider security", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider-security" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider security" ], "toolProficiency" : [ "SOAR platforms", "SIEM platforms" ], "communicationSkills" : "Oral communication; Written communication", "continuousLearning" : "Learning about security domains", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Creative problem solving; Critical problem solving", "outcomesObjectives" : "Improve security outcomes", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 7+ years systems/network/application security, 5+ years on Security team, 1 year programming/scripting language, Experience leading junior engineers", "qualificationsPreferred" : "Excellent written/verbal communication, 7+ years security response/automation/threat intelligence, Malware analysis experience, Forensics experience, SOAR platforms experience, SIEM platforms experience, Experience with MS Windows, Linux, MacOS, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services team is looking for a passionate Senior Security Incident Response Engineer who can lead the response to security issues across the largest cloud provider in the world. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! You’ll apply your creative and critical problem solving skills to quickly design and build tooling that enables programmatic automation at a massive scale. You must have a passion for engineering solutions to complex security challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about information security, the threat landscape and security automation and tooling. Key job responsibilities - Work across multiple security teams as a lead security engineer providing security and technical guidance. - Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes - Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications - Bar raise security issues and escalate appropriately - Identify opportunities to prevent security issues at scale - Mentor and develop teammates both technically and professionally About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. - 7+ years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 5+ years experience on a Security team, especially experience coordinating responses to security incidents. - 1 year proficiency with one high-level programming or scripting language. - Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications: - Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences. - 7+ years experience working in security response, security automation tooling, or threat intelligence. - Experience with malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS) - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Security Incident Response Engineer at Amazon.com Services LLC. Skills: Incident response, Security automation, Cloud security. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T10:52:46.897", "createdAt" : "2026-06-13T10:52:46.897", "lastUpdated" : "2026-06-15T03:15:22.523", "ingestTimestamp" : "2026-06-13T10:52:46.897", "mongoId" : "68b706967fc9a711f0f6f106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3054814/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention", "Creative problem solving", "Critical thinking", "Incident response", "Security automation", "Cloud security", "Security engineering", "Threat landscape", "Security automation tooling", "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Cloud provider security", "SOAR platforms", "SIEM platforms" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1398.1058, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2c68fa74d8ee00a0905806", "title" : "Senior Incident Response Specialist, Cyber Security", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Response Specialist in Kuala Lumpur, Malaysia, adjusted for the cybersecurity industry and senior experience level." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "timestamp" : "2026-06-16T02:39:21.304", "fingerprint" : "d361c038e80e7ee25f06c2708e696babafce6881749e9a55b1eb9bfeb96da610", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f8691c89-168e-4178-9678-8a9d39b9914d/application", "externalId" : "f8691c89-168e-4178-9678-8a9d39b9914d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Elastic Stack, SIEM, Cloud", "professionalSkills" : [ "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding" ], "hardSkillsList" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises" ], "hardSkills" : [ { "name" : "Security alerts", "level" : "intermediate" }, { "name" : "Security events", "level" : "intermediate" }, { "name" : "Malware investigation", "level" : "intermediate" }, { "name" : "Phishing investigation", "level" : "intermediate" }, { "name" : "Insider threats", "level" : "intermediate" }, { "name" : "Cloud breaches", "level" : "intermediate" }, { "name" : "Detection rule creation", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Simulation exercises", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" } ], "majorSkills" : "Incident Response, Cyber Security, SIEM platform", "majorSkillsList" : [ "Incident Response", "Cyber Security", "SIEM platform" ], "coreResponsibilities" : "Monitor security alerts, Investigate security alerts, Analyze security incidents, Contain security incidents, Escalate security incidents, Tune SIEM rules, Suggest new detections, Analyze logs, Correlate logs, Create incident documentation, Maintain incident documentation, Create incident reports, Maintain incident reports, Create lessons learned, Maintain lessons learned, Support playbook execution, Remediate incidents, Perform root cause analysis, Provide use case insights, Validate use cases, Test use cases, Escalate confirmed incidents, Participate in reviews, Improve processes, Improve detections, Validate security events, Identify legitimate threats, Investigate malware incidents, Investigate phishing incidents, Investigate insider threats, Investigate cloud breaches, Assist in rule creation, Assist in rule tuning, Map MITRE ATT&CK, Improve detection quality, Hunt threats, Handle incidents, Collect evidence, Document incidents, Support compliance, Support audits, Contribute to automation, Participate in training, Participate in simulations, Participate in exercises, Onboard log sources, Manage log availability", "teamCollaboration" : "Collaborate with IT; Collaborate with network; Collaborate with application teams; Collaborate with MSSP; Collaborate with CSIRT; Collaborate with IT infrastructure", "domainKnowledge" : "Cyber resilience; MITRE ATT&CK; Cloud breaches; Insider threats; Malware; Phishing", "domainList" : [ "cyber-resilience", "mitre-att-ck", "cloud-breaches", "insider-threats", "malware", "phishing" ], "domainSpecificKnowledge" : [ "Cyber resilience", "MITRE ATT&CK", "Cloud breaches", "Insider threats", "Malware", "Phishing" ], "toolProficiency" : [ "Elastic Stack", "SIEM" ], "documentationSkills" : "Incident documentation; Incident reports; Lessons learned; Evidence collection; Compliance documentation; Audit documentation", "continuousLearning" : "Training sessions; Simulations; Tabletop exercises", "innovationCreativity" : "Automation opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Ensure timely response; Maintain cyber resilience; Align with MTTD goals; Align with MTTR goals", "qualificationsBasic" : "Perform deep-dive investigations, Conduct threat hunting, Support incident response reporting, Manage continuous logs availability", "qualificationsPreferred" : "MITRE ATT&CK mapping, Automation opportunities", "rawDescription" : "Role Mission The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution. Accountabilities: - Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts. - Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals. - Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections. - Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud). - Create and maintain incident documentation, reports, and lessons learned. - Support incident response playbook execution during containment and recovery phases. - Collaborate with IT, network, and application teams for incident remediation and root cause analysis. - Provide insights for use case improvements and participate in use case validation and testing. - Escalate confirmed incidents to CSIRT / Assistant Manager - Incident Response for further action. - Participate in post-incident reviews, contributing to process and detection improvements. - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. Requirements - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. #LI-JE1", "summaryDescription" : "Senior Incident Response Specialist, Cyber Security. Skills: Incident Response, Cyber Security, SIEM platform. Monitor security alerts. Investigate security alerts", "createdAt" : "2026-06-14T19:11:17.518", "lastUpdated" : "2026-06-16T02:39:21.304", "ingestTimestamp" : "2026-06-14T19:11:17.518", "mongoId" : "6a2c68fa74d8ee00a0905806", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises", "Incident Response", "Cyber Security", "SIEM platform", "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding", "Cyber resilience", "MITRE ATT&CK", "Malware", "Phishing", "Elastic Stack", "SIEM" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1388.0488, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1384.4155, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c751574d8ee00a09360f7", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T03:29:01.550", "fingerprint" : "a9b58b622fae2a5e015d888ceb1430e0f4c7af9bae19294b10f2e0362b229c6e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, Data lakes, EDR, Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management" ], "hardSkillsList" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Incident containment", "level" : "intermediate" }, { "name" : "Incident remediation", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response planning", "level" : "intermediate" }, { "name" : "On-call management", "level" : "intermediate" }, { "name" : "Escalation paths", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Adversary tradecraft", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire for functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Ensure critical telemetry is available, Ensure critical telemetry is reliable, Ensure critical telemetry is actionable, Embed detection and response by design, Build a security program, Use Serval's agents for security problems, Use Serval's agents for security-operations problems", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure; Work with stakeholders", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments; AI-native automation", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments", "ai-native-automation" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "communicationSkills" : "Written communication; Verbal communication; Incident communication", "innovationCreativity" : "Solve frontier security problems; Solve frontier security-operations problems", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Scale detection and response operations; Improve response quality; Improve response speed", "qualificationsBasic" : "10+ years in cybersecurity, Deep expertise in detection engineering, Deep expertise in incident response, Deep expertise in security operations, Deep experience building detection and response teams, Deep experience building instrumentation/observability teams, Deep experience building threat intelligence teams, Stellar leadership skills, Demonstrated history of driving improvements, Exceptional written communication skills, Exceptional verbal communication skills, Remain calm under pressure, Effectively run command of security incidents, Deep expertise in modern observability stacks, Deep expertise in SIEM, Deep expertise in data lakes, Deep expertise in EDR, Deep expertise in cloud telemetry, Deep expertise in logging, Deep expertise in detection primitives, Understand modern adversary tradecraft (TTPs), Demonstrated experience translating TTPs into detection strategies, Demonstrated experience translating TTPs into response actions, Mission-oriented, Unimpeachable integrity, Passionate about detecting and responding to adversaries", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T19:27:55.217", "lastUpdated" : "2026-06-16T03:29:01.550", "ingestTimestamp" : "2026-06-14T19:27:55.217", "mongoId" : "6a2c751574d8ee00a09360f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 1364.3652, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e418f8b1b0376634c36a", "title" : "Security Engineer, Incident Response, CorpSec", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:14:41.009", "fingerprint" : "1d73ed9116d8a3da3a8809fe15ae6abbeb90fed1911a7e130db33978905c1cf9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3079013/apply", "externalId" : "6e9703e8-c44e-4f5b-9f27-1aa702f0786e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Threat hunting, Detection engineering, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, Programming language, Scripting language, Amazon Web Services", "professionalSkills" : [ "Security monitoring", "Response activities" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership", "Curiosity", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Response activities", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Curiosity" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security engineering, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security engineering", "Threat intelligence" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities", "teamCollaboration" : "Global team environment; Security issues", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Threat hunting; Detection engineering; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "threat-hunting", "detection-engineering", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider" ], "toolProficiency" : [ "SOAR", "SIEM platforms" ], "communicationSkills" : "Clear communication; Accurate communication", "continuousLearning" : "Learn about security domains", "problemSolvingSkills" : "Think like attacker; Think like defender", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 3 years systems, network, or application security experience, 3 years experience on Security team, Coordinating security incident responses, Proficiency with one high-level programming or scripting language", "qualificationsPreferred" : "Experience in security operations or incident response, Experience in security automation tooling, Experience in threat intelligence, Familiarity with threat hunting, Familiarity with detection engineering, Familiarity with malware analysis, Familiarity with forensics, Familiarity with SOAR, Familiarity with SIEM platforms, Familiarity with variety of Operating Systems, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, threat hunting, detection engineering, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. Or equivalent industry certification. - 3 years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 3 years experience on a Security team, especially experience coordinating responses to security incidents. Proficiency with one high-level programming or scripting language. Preferred Qualifications: - Experience working in security operations or incident response, security automation tooling, or threat intelligence. - Familiarity with threat hunting, detection engineering, malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS). - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Incident Response, CorpSec at Amazon.com Services LLC. Skills: Incident response, Security engineering, Threat intelligence. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T11:16:05.380", "createdAt" : "2026-06-13T11:16:05.380", "lastUpdated" : "2026-06-15T02:14:41.009", "ingestTimestamp" : "2026-06-13T11:16:05.380", "mongoId" : "68c2e418f8b1b0376634c36a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3079013/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Leadership", "Curiosity", "Critical thinking", "Incident response", "Security engineering", "Threat intelligence", "Operating system security", "Network security", "Cryptography", "Software security", "Cloud provider", "SOAR", "SIEM platforms" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1362.1903, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "69cf3f052beec4dd3d9340a4", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect" ], "timestamp" : "2026-06-15T08:10:44.516", "fingerprint" : "e7b6067f8d5e1ee3cf111fd915ee7bae8c724b95799fbd946bdb1b7400dc7409", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382311/apply", "externalId" : "49079c29-efa4-48bb-96db-5c916f303463", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Java, C++, HTTP(S), DNS, TCP/IP, Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, AWS", "professionalSkills" : [ "Risk assessment", "Security engineering" ], "hardSkillsList" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System tooling development", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design cohesive responses, Coordinate responses across teams, Build security utilities, Build security tools, Communicate effectively", "teamCollaboration" : "Multiple teams across organization; Fellow Security Engineers", "domainKnowledge" : "Cloud security; National security; Cryptography; Network security; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; AWS services", "domainList" : [ "cloud-security", "national-security", "cryptography", "network-security", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "aws-services" ], "domainSpecificKnowledge" : [ "Cloud security", "National security", "Cryptography", "Network security", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "AWS services" ], "toolProficiency" : [ "Splunk", "ELK" ], "communicationSkills" : "Communicate at multiple levels; Communicate to multiple audiences", "problemSolvingSkills" : "Think like attacker; Think like defender; Mitigate risks", "specialRequirements" : "US Citizen, TS/SCI with polygraph, On-call responsibilities", "qualificationsBasic" : "Bachelor's degree or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+, 2+ years scripting or programming or security code review, Knowledge of networking protocols, Current, active US Government Security Clearance of TS/SCI with Polygraph", "qualificationsPreferred" : "AWS certification, Cloud Technology Certification, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux/Unix tools, Knowledge of Linux/Unix architecture, Deep understanding of AWS service catalog, Used AWS services in production, Experience with log analysis systems, Familiarity with Windows logging systems, Familiarity with Linux logging systems, Understanding of high-level cryptography principles", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity. - Experience with log analysis systems, like Splunk or ELK. - Familiarity with Windows and Linux logging systems. - Understanding of high-level cryptography principles (PKI, encryption algorithms, etc) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T14:00:19.237", "createdAt" : "2026-06-13T14:00:19.237", "lastUpdated" : "2026-06-15T08:10:44.516", "ingestTimestamp" : "2026-06-13T14:00:19.237", "mongoId" : "69cf3f052beec4dd3d9340a4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382311/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence", "Leadership", "Cloud security", "Security engineering", "National security", "AWS services", "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect", "Splunk", "ELK" ], "skillCount" : 34, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1336.2684, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Security" }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1. Security Monitoring & Threat Detection : · Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. · Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. · Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2. Incident Response & Remediation : · Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. · Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. · Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. · Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. · Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. · Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3. Tool Administration and Management of SOC Solutions : · Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. · Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. · Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. · Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. · Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. · Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4. Collaboration, Automation, and Innovation Activities : · Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. · Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5. Documentation, Reporting, and Compliance Activities : · Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. · Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. · Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. · Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) · Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) · Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures · Bachelor’s degree in Computer Science, Information Security, or related field · Master’s degree preferred · Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent · Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary · Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. · Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership · Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review · Analytical mindset with attention to detail · Excellent communication and documentation skills · Ability to work under pressure and manage multiple incidents simultaneously · Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 1302.8042, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3089aaf292fd229c094821", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.5E7, "max" : 5.0E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-16T10:11:45.575", "fingerprint" : "65df1f71ef24fcafefd9c420b9edd4eb5708b68d7f9ce438053fd226a38910ba", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132277150--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000132277150", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python, Panther SIEM", "professionalSkills" : [ "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation" ], "hardSkillsList" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "SOAR automation", "level" : "intermediate" }, { "name" : "Incident response workflows", "level" : "intermediate" }, { "name" : "API integrations", "level" : "intermediate" }, { "name" : "Scripting for automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response Automation, SOAR Platform Development, Security Operations", "majorSkillsList" : [ "Incident Response Automation", "SOAR Platform Development", "Security Operations" ], "coreResponsibilities" : "Build SOAR automated response platform, Maintain SOAR automated response platform, Support AI-enabled response, Route escalations to personnel, Build automated SOC response tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team, Respond to security incidents", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Fintech industry; Regulated industry environment; SOC response; SIEM; SOAR; APIs; AI/LLM response automation; DLP design; DLP tuning", "domainList" : [ "fintech-industry", "regulated-industry-environment", "soc-response", "siem", "soar", "apis", "ai-llm-response-automation", "dlp-design", "dlp-tuning" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "English fluency; Effective communication", "continuousLearning" : "Desire to learn AI/LLM", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response team support, Occasional off-hours support", "qualificationsBasic" : "Excellent English fluency/proficiency, SOC response experience, Experience in a fintech industry, Experience in a highly regulated industry, Experience working in a lean team, Experience working in a fast-paced technical environment, Experience designing SIEM findings, Experience implementing SIEM findings, Experience tuning SIEM findings, Experience designing SOAR findings, Experience implementing SOAR findings, Experience tuning SOAR findings, Experience configuring advanced automations, Experience with APIs, Understanding of APIs, API integrations experience, Ability to set up API connections, Using APIs to access/retrieve data, Experience with scripting for automation, Experience in data management, Experience in data manipulation, Experience in data presentation", "qualificationsPreferred" : "Python for scripting experience, AI/LLM response automation experience, DLP design experience, DLP tuning experience, Panther SIEM experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response Automation, SOAR Platform Development, Security Operations. Build SOAR automated response platform. Maintain SOAR automated response platform", "postedDate" : "2026-06-15T19:59:33.000", "createdAt" : "2026-06-16T01:45:15.499", "lastUpdated" : "2026-06-16T10:11:45.575", "ingestTimestamp" : "2026-06-16T01:45:15.499", "mongoId" : "6a3089aaf292fd229c094821", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation", "Negotiation", "Incident Response Automation", "SOAR Platform Development", "Security Operations", "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation", "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning", "Torq", "Tines", "Google Sheets", "Excel" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1285.4282, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb0c074d8ee00a09daf1c", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T09:19:56.220", "fingerprint" : "14803e741daf8986e22ba67efd869ed1db5cb9f7c1f099fcc2a20c6ed18f6f72", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Threat intelligence", "Observability", "Program management" ], "hardSkillsList" : [ "Adversary tradecraft", "Detection strategies", "Response actions" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Adversary tradecraft", "level" : "intermediate" }, { "name" : "Detection strategies", "level" : "intermediate" }, { "name" : "Response actions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Partner with engineering teams, Ensure telemetry availability, Ensure telemetry reliability, Ensure telemetry actionability, Embed detection and response, Build security program", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "communicationSkills" : "Written communication; Verbal communication", "innovationCreativity" : "Use Serval's agents", "qualificationsBasic" : "10+ years cybersecurity, Deep expertise detection engineering, Deep expertise incident response, Deep expertise security operations, Deep experience building teams, Deep experience leading teams, Stellar leadership skills, Demonstrated history driving improvements, Exceptional written communication, Exceptional verbal communication, Remain calm under pressure, Effectively run incidents, Deep expertise observability stacks, Deep expertise detection primitives, Understand modern adversary tradecraft, Experience translating TTPs, Experience into detection strategies, Experience into response actions", "qualificationsPreferred" : "Experience with SIEM, Experience with data lakes, Experience with EDR, Experience with cloud telemetry, Experience with logging", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T03:16:25.185", "lastUpdated" : "2026-06-15T09:19:56.220", "ingestTimestamp" : "2026-06-14T03:16:25.185", "mongoId" : "6a2cb0c074d8ee00a09daf1c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Adversary tradecraft", "Detection strategies", "Response actions", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Threat intelligence", "Observability", "Program management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 1261.5067, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5f4074d8ee00a08ea55f", "title" : "Security Incident Response Lead", "company" : "Nscale", "industry" : "AI Infrastructure", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-15T02:45:24.541", "fingerprint" : "97da22b2e3f980604e8d6395c438f3f52604ff35672fecd27a2405a86ad0765f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4824321101", "externalId" : "4824321101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud infrastructure, SIEM, EDR/XDR, Automation", "professionalSkills" : [ "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering" ], "hardSkillsList" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Forensics techniques", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Incident lifecycles", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Cloud security", "majorSkillsList" : [ "Incident response", "Digital forensics", "Cloud security" ], "coreResponsibilities" : "Lead end-to-end security incident response, Act as incident commander, Coordinate cross-functional response efforts, Conduct investigations, Oversee investigations, Apply digital forensics techniques, Drive containment efforts, Drive eradication efforts, Drive recovery efforts, Contribute to threat hunting, Contribute to proactive investigations, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation frameworks, Establish escalation frameworks, Lead post-incident reviews, Lead root cause analysis, Drive long-term remediation actions, Partner to improve alerting, Partner to improve triage, Partner to improve response workflows, Build incident response tooling, Scale incident response tooling, Enhance case management systems", "teamCollaboration" : "Cross-functional response efforts; Partner with Detection & Response; Coordinate with Infrastructure; Coordinate with IT; Coordinate with Legal; Coordinate with Compliance", "domainKnowledge" : "AI infrastructure; High-performance computing; Large-scale distributed systems; Attack techniques; Threat actors; Incident lifecycles; Cloud environments; Production environments", "domainList" : [ "ai-infrastructure", "high-performance-computing", "large-scale-distributed-systems", "attack-techniques", "threat-actors", "incident-lifecycles", "cloud-environments", "production-environments" ], "domainSpecificKnowledge" : [ "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Incident lifecycles", "Cloud environments", "Production environments" ], "toolProficiency" : [ "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "communicationSkills" : "Brief leadership; Coordinate across teams", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "End-to-end IR effectiveness; High-severity incident coordination; Post-incident review completion; Remediation completion; IR tooling maturity; Automation maturity; Workflow maturity", "qualificationsBasic" : "8-12+ years incident response experience, 8-12+ years security operations experience, 8-12+ years digital forensics experience, Proven experience leading high-severity investigations, Hands-on experience with SIEM, Hands-on experience with EDR/XDR, Hands-on experience with detection tooling, Operate as technical leader, Make decisions under pressure, Brief leadership, Coordinate across teams", "qualificationsPreferred" : "Experience in AI infrastructure, Experience in high-performance computing, Experience in large-scale distributed systems, Familiarity with detection engineering, Familiarity with threat hunting, Familiarity with building automation for IR", "remoteFriendly" : true, "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Security Incident Response Lead to own and evolve Nscale’s incident response capability in a high-scale, AI-native environment. This is a hands-on leadership role focused on leading investigations across infrastructure, enterprise systems, and security events, while driving effective containment, eradication, and recovery. The role operates at the center of incident coordination and partners closely with Detection & Response as well as cross-functional stakeholders including Infrastructure, IT, Legal, and Compliance. You will help shape how Nscale detects and responds to threats by building the processes, tooling, and operational rigor behind the incident response function. This role is critical to strengthening the organization’s security posture and ensuring high-severity events are managed with speed, clarity, and technical depth. This role will be part of the global CISO organization. What you'll be doing Incident Leadership & Coordination Lead end-to-end security incident response across the organization Act as the incident commander for high-severity events Coordinate cross-functional response efforts with Infrastructure, IT, Legal, and Compliance Participate in and help design on-call and escalation rotations Investigations & Forensics Conduct and oversee investigations across endpoints, cloud, and infrastructure systems Apply digital forensics techniques across logs, endpoints, and cloud environments Drive containment, eradication, and recovery efforts for active security incidents Contribute to threat hunting and proactive investigations Process, Playbooks & Operational Rigor Develop and maintain incident response playbooks and runbooks Establish escalation frameworks to support effective incident handling Lead post-incident reviews and root cause analysis efforts Drive long-term remediation actions following incidents Tooling & Response Improvement Partner with Detection & Response teams to improve alerting, triage, and response workflows Build and scale incident response tooling and automation Enhance case management systems that support investigation and response operations KPIs End-to-end security incident response effectiveness High-severity incident coordination and command Post-incident review and remediation completion Incident response tooling, automation, and workflow maturity About You 8–12+ years of experience in incident response, security operations, or digital forensics Proven experience leading complex, high-severity incident investigations in cloud or distributed environments Strong expertise in forensics and investigation techniques across endpoints, cloud, and logs Hands-on experience with SIEM, EDR/XDR, and detection tooling Familiarity with cloud infrastructure and modern production environments Deep understanding of attack techniques, threat actors, and incident lifecycles Ability to operate as a technical leader during incidents and make decisions under pressure Strong communication skills with the ability to brief leadership and coordinate across teams Experience in AI infrastructure, high-performance computing, or large-scale distributed systems is a plus Familiarity with detection engineering, threat hunting, or building automation for incident response workflows is beneficial What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $150,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Security Incident Response Lead at Nscale. Skills: Incident response, Digital forensics, Cloud security. Lead end-to-end security incident response. Act as incident commander", "postedDate" : "2026-06-12T22:26:36.876", "createdAt" : "2026-06-12T22:26:36.876", "lastUpdated" : "2026-06-15T02:45:24.541", "ingestTimestamp" : "2026-06-12T22:26:36.876", "mongoId" : "6a2c5f4074d8ee00a08ea55f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles", "Leadership", "Cloud security", "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering", "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Cloud environments", "Production environments", "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "_score" : 1255.0454, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI Infrastructure" }, { "id" : "6a2c91cb74d8ee00a09841a3", "title" : "Security Specialist II", "company" : "Redwood Materials", "industry" : "Manufacturing", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Specialist in McCarran, Nevada, adjusted for the manufacturing industry and company size." }, "location" : "McCarran, NV", "locations" : [ "McCarran", "NV" ], "timestamp" : "2026-06-16T04:40:11.602", "fingerprint" : "ebe1e091a2bce01fd670a5ae114af4c4b574e0b9da2e18e3b01a1d3a661f8497", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/redwoodmaterials/jobs/6019247004?gh_jid=6019247004", "externalId" : "6019247004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "McCarran", "state" : "Nevada", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "36.0861034,-115.1611002" } ], "locationText" : "McCarran, Nevada, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "High School", "professionalSkills" : [ "Incident response", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response" ], "hardSkillsList" : [ "First aid" ], "hardSkills" : [ { "name" : "First aid", "level" : "intermediate" } ], "majorSkills" : "Security operations, Incident response, Patrol procedures", "majorSkillsList" : [ "Security operations", "Incident response", "Patrol procedures" ], "coreResponsibilities" : "Perform assigned security duties, Patrol facilities and grounds, Monitor security systems, Respond to incidents, Serve as on-site responder, Follow response procedures, Follow escalation protocols, Notify supervisors of incidents, Conduct routine patrols, Conduct random patrols, Identify hazards, Identify security risks, Identify policy violations, Monitor CCTV systems, Operate CCTV systems, Monitor access control systems, Operate access control systems, Monitor alarm systems, Operate alarm systems, Monitor life-safety systems, Operate life-safety systems, Report system irregularities, Control site access, Document site access, Process visitors, Verify contractor credentials, Respond to alarms, Assess incident conditions, Escalate incidents to supervisors, Escalate incidents to emergency services, Provide initial emergency response, Provide basic first aid, Assist with evacuations, Control incident scenes, Complete incident reports, Complete daily activity logs, Complete shift documentation, Maintain accountability of issued equipment, Report equipment deficiencies, Support site operations, Support special events, Support high-visibility activities, Follow company policies, Follow post orders, Follow safety procedures, Report policy deviations, Communicate with supervisors, Communicate with team members, Ensure continuity between shifts", "teamCollaboration" : "Continuity between shifts", "domainKnowledge" : "Security operations; Patrol procedures; Access control systems; CCTV monitoring; Alarm systems; Emergency response protocols", "domainList" : [ "security-operations", "patrol-procedures", "access-control-systems", "cctv-monitoring", "alarm-systems", "emergency-response-protocols" ], "domainSpecificKnowledge" : [ "Security operations", "Patrol procedures", "Access control systems", "CCTV monitoring", "Alarm systems", "Emergency response protocols" ], "toolProficiency" : [ "CCTV", "Access control systems", "Alarms", "Life-safety systems" ], "communicationSkills" : "Complete accurate reports; Maintain shift continuity; Communicate professionally", "documentationSkills" : "Incident reports; Daily activity logs; Shift documentation", "problemSolvingSkills" : "Assess situations; Make sound decisions", "specialRequirements" : "Work rotating shifts, Work nights, Work weekends, Work holidays, Work overtime, Work extended hours, Stand for extended periods, Walk for extended periods, Patrol for extended periods, Respond to incidents for extended periods", "outcomesObjectives" : "Adherence to procedures; Response effectiveness; Completion of assigned tasks", "qualificationsBasic" : "High school diploma or equivalent, Prior security experience, Prior military experience, Prior law enforcement experience, Prior emergency response experience, Prior industrial security experience", "qualificationsPreferred" : "Working knowledge of security operations, Working knowledge of patrol procedures, Working knowledge of access control systems, Working knowledge of CCTV monitoring, Working knowledge of alarm systems, Working knowledge of emergency response protocols", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "About Redwood Materials Redwood is localizing a global battery supply chain that seamlessly integrates recovery, reuse, and recycling — keeping critical minerals in circulation and driving the energy transition. Founded in 2017, we’re delivering low-cost and large-scale energy storage and producing battery materials in the U. S. for the first time, all from batteries we already have. Security Specialist Security Specialists operate under direct or general supervision during assigned shifts. Work is performed in accordance with established procedures, post orders, and supervisor direction. Personnel are expected to carry out assigned duties, follow escalation protocols, and notify supervisors of incidents requiring higher-level decision-making. Performance is evaluated based on adherence to procedures, response effectiveness, and completion of assigned tasks. Responsibilities will include: Perform assigned security duties during scheduled shifts, including patrols, monitoring systems, and incident response. Serve as an on-site responder to security, safety, and medical incidents, following established response procedures and escalation protocols. Conduct routine and random patrols of facilities and grounds to identify hazards, security risks, or policy violations. Monitor and operate CCTV, access control systems, alarms, and life-safety systems, reporting irregularities to supervision. Control and document site access, including visitor processing, credential checks, and contractor verification. Respond to alarms and incidents, assess conditions, and escalate to supervisors or emergency services as required. Provide initial emergency response support, including basic first aid, evacuation assistance, and scene control until relieved. Complete incident reports, daily activity logs, and shift documentation accurately and before the end of each shift. Maintain accountability of issued equipment, ensuring readiness and reporting deficiencies. Support site operations, special events, and high-visibility activities as directed by supervision. Follow all company policies, post orders, and safety procedures, reporting any deviations. Communicate effectively with supervisors and team members to ensure continuity between shifts. All other duties as assigned. Desired Qualifications High school diploma or equivalent required; prior security, military, law enforcement, emergency response, or industrial security experience preferred Working knowledge of security operations, patrol procedures, access control systems, CCTV monitoring, alarm systems, and emergency response protocols Ability to follow and apply established procedures, post orders, safety requirements, and escalation protocols in a fast-paced operational environment Ability to work rotating shifts, including nights, weekends, holidays, overtime, and extended hours as operationally required Effective verbal and written communication skills, including the ability to complete accurate reports, maintain shift continuity, and communicate professionally with employees, contractors, visitors, and emergency responders Ability to assess situations, remain calm under pressure, and make sound decisions during security, safety, medical, or operational incidents Ability to stand, walk, patrol, and respond to incidents for extended periods while maintaining situational awareness and operational readiness The position is full-time. Compensation will be commensurate with experience. We collect personal information (PI) from you in connection with your application for employment with Redwood Materials, including the following categories of PI: identifiers, personal records, professional or employment information, and inferences drawn from your PI. We collect your PI for our purposes, including performing services and operations related to your potential employment. If you have additional privacy-related questions, please contact us at privacy@redwoodmaterials.com.", "summaryDescription" : "Security Specialist II at Redwood Materials. Skills: Security operations, Incident response, Patrol procedures. Perform assigned security duties. Patrol facilities and grounds", "postedDate" : "2026-06-14T21:48:11.737", "createdAt" : "2026-06-14T21:48:11.737", "lastUpdated" : "2026-06-16T04:40:11.602", "ingestTimestamp" : "2026-06-14T21:48:11.737", "mongoId" : "6a2c91cb74d8ee00a09841a3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 110000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "First aid", "Security operations", "Incident response", "Patrol procedures", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response", "Access control systems", "Emergency response protocols", "CCTV", "Alarms", "Life-safety systems" ], "skillCount" : 13, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1249.4485, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "69d5e4962beec4dd3d931981", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:08:07.757", "fingerprint" : "0c97d9ed2d550c199650d60b2166fb48eb0e947fd71728e016fa19334f04915f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385139/apply", "externalId" : "f0a1c5b4-3fd4-4296-8fb3-027521c0d98b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence", "professionalSkills" : [ "Risk assessment", "Information security" ], "hardSkillsList" : [ "Log analysis", "Forensics", "System development", "Tool development" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System development", "level" : "intermediate" }, { "name" : "Tool development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design security responses, Coordinate security responses, Build security utilities, Build security tools, Communicate effectively, Instill best practices", "teamCollaboration" : "Multiple teams across organization; Security engineers", "domainKnowledge" : "Cloud security; National security program", "domainList" : [ "cloud-security", "national-security-program" ], "domainSpecificKnowledge" : [ "Cloud security", "National security program" ], "communicationSkills" : "Communicate at multiple levels", "problemSolvingSkills" : "Think like attacker; Think like defender", "specialRequirements" : "On-call responsibilities, US Citizen, TS/SCI with polygraph", "qualificationsBasic" : "Associate's degree or above, GCIH or GSEC or Security+, Current, active US Government Security Clearance of TS/SCI with Polygraph, US Citizen", "qualificationsPreferred" : "Experience with AWS products and services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing virtual infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities You should be able to accomplish most of the following: - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Associate's degree or above - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T01:35:14.469", "createdAt" : "2026-06-13T01:35:14.469", "lastUpdated" : "2026-06-15T02:08:07.757", "ingestTimestamp" : "2026-06-13T01:35:14.469", "mongoId" : "69d5e4962beec4dd3d931981", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385139/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Forensics", "System development", "Tool development", "Leadership", "Incident response", "Security operations", "Cloud security", "Risk assessment", "Information security", "National security program", "GCIH", "GSEC", "Security+" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1245.6102, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "68c2e423f8b1b0376634c56d", "title" : "Senior Incident Response Engineer, Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hawthorne, California, USA", "locations" : [ "Hawthorne, California, USA" ], "certifications" : [ "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA" ], "timestamp" : "2026-06-15T08:13:32.312", "fingerprint" : "3317fe4da3a6f579d3a5ccdc8430939e8a2a28d3935ec2384cf4f9b32c5db032", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072356/apply", "externalId" : "2d1861cb-aa75-46c6-9067-b6a683645372", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hawthorne", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9128272,-118.3426122" } ], "locationText" : "Hawthorne, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, WAF, EDR/XDR, Python, PowerShell, Bash, Splunk, SOAR, SQL", "professionalSkills" : [ "Incident response", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis" ], "hardSkillsList" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries" ], "softSkillsList" : [ "Judgment under pressure", "Calmness" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network telemetry", "level" : "intermediate" }, { "name" : "Attacker TTPs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "SQL queries", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Judgment under pressure" }, { "name" : "Calmness" } ], "majorSkills" : "Incident response, Security engineering, Detection engineering", "majorSkillsList" : [ "Incident response", "Security engineering", "Detection engineering" ], "coreResponsibilities" : "Investigate security incidents, Respond to security incidents, Drive rapid response, Drive effective response, Act as incident responder, Act as incident commander, Coordinate technical response, Keep stakeholders informed, Conduct post-mortem analysis, Identify root causes, Identify security improvement opportunities, Consult with builder teams, Ensure security designed into products, Collaborate with stakeholders, Execute incident response, Develop detections, Maintain detections, Respond to detections, Combat fraud, Combat abuse, Develop prevention capabilities, Develop detection capabilities, Develop response capabilities, Increase capability through automation, Increase efficiency through automation, Increase signal quality using AI/ML, Assist in runbook development, Assist in playbook tuning, Drive process improvements, Coordinate response efforts, Share learnings, Maintain WAF products, Support WAF products, Protect services from abuse, Drive WAF adoption, Evaluate WAF rules, Tune WAF rules, Develop SQL queries, Analyze log data, Extract information from logs, Extract information from databases, Extract information from services, Spearhead incident response, Drive decision-making, Conduct impact assessments, Implement containment strategies, Develop durable solutions, Proactively hunt threats, Create new detection mechanisms, Consult on security for new product designs, Analyze data, Identify hidden vulnerabilities", "teamCollaboration" : "Cross-functional teams; Global Amazon Security team; Other Incident Response teams", "projectManagementSkills" : [ "Runbook development", "Playbook tuning" ], "domainKnowledge" : "Devices and Services security; IoT platforms; Customer safety; Customer privacy; Fraud and abuse; Distributed systems; Cloud-native architectures; Service-oriented environments; IoT device security; Embedded systems", "domainList" : [ "devices-and-services-security", "iot-platforms", "customer-safety", "customer-privacy", "fraud-and-abuse", "distributed-systems", "cloud-native-architectures", "service-oriented-environments", "iot-device-security", "embedded-systems" ], "domainSpecificKnowledge" : [ "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems" ], "toolProficiency" : [ "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "communicationSkills" : "Clear communication; Stakeholder communication", "documentationSkills" : "Document work thoroughly; Contribute to post-incident reviews", "continuousLearning" : "Expand AI/ML skills", "innovationCreativity" : "Identify opportunities to raise the bar", "problemSolvingSkills" : "Problem-solvers; Investigative instincts; Troubleshooting", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Reduce or eliminate risk; Improve security for Amazon products; Improve security for Amazon services", "qualificationsBasic" : "5+ years cybersecurity experience, Incident response experience, Detection engineering experience, Security operations experience, Working knowledge of AWS, Working knowledge of WAF, Working knowledge of EDR/XDR tools, Working knowledge of network telemetry, Working knowledge of log analysis, Practical knowledge of attacker TTPs, Experience leveraging MITRE ATT&CK, Interpersonal skills, Communication skills, Proficiency with scripting, Proficiency with automation", "qualificationsPreferred" : "Proficiency with SIEM platform, Writing SIEM searches, Creating SIEM alerts, Analyzing SIEM log data, Forensic techniques, Threat hunting techniques, Identify adversary behavior, Detect anomalies, Analyze malware, Experience in large enterprise environments, Supporting multiple business lines, Experience securing distributed systems, Responding to incidents in distributed systems, Experience with cloud-native architectures, Experience with service-oriented environments, Experience with IoT device security, Experience with embedded systems forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you ready to protect millions of homes and families as part of Amazon's elite Device Security Incident Response team? Join us in defending Ring, Blink, eero, and other industry-leading IoT platforms where every incident response decision impacts real people's safety and privacy. We’re looking for a seasoned security engineer to join a cross-functional Incident Response team supporting multiple Amazon devices brands. This is a hands-on role is focused on protecting the security and privacy of millions of customers by responding to incidents that impact real-world products and services. Our customers trust us with their safety and personal spaces, and it’s our responsibility to uphold that trust through strong, effective security practices. You will become a subject matter expert in the brands you support, leading our response to incidents through detection, assessment, containment, eradication, and post-mortem, while identifying opportunities to raise the bar on security for Amazon products and Customers. This high-visibility role requires clear communication, sound judgment under pressure, and the ability to work across organizational boundaries. You will be a strong advocate for customer safety and privacy, ensuring our devices deliver protection without compromise. You will document your work thoroughly, contribute to post-incident reviews, and collaborate with engineering teams to drive long-term improvements across the business. You will have opportunities to utilize, or expand your AI/ML skills, as we focus on automation. Key job responsibilities * Investigate and respond to security incidents in the Devices and Services org, setting the pace, and driving rapid, effective response that reduces or eliminates risk * Act as an incident responder or commander during active security events, coordinating technical response while keeping business stakeholders informed * Conduct thorough post-mortem analysis of security incidents, driving root cause identification, and identifying opportunities to improve security for Amazon products and services * Security consults with builder teams to ensure that security is designed into products from their inception * Collaborate with both technical, and non-technical stakeholders at all levels of the business, to execute rapid, and effective incident response * Develop, maintain, and respond to detections using Splunk/SOAR, as well as internal Amazon tooling * Combat various forms of fraud and abuse, by coordinating with business teams to develop comprehensive prevention/detection/response capabilities * Contribute to team efforts to increase capability and efficiency through automation of manual workloads and increase signal quality using AI/ML tools or approaches * Assist in runbook development, playbook tuning, and continuous process improvements * Participate in an on-call rotation (approx. two weekend days per month) * Work within a global, collaborative Amazon Security team where engineers and specialists support one another to solve complex problems and respond to security challenges together * Coordinate response efforts with other Incident Response teams at Amazon when appropriate, and share learnings * Maintain and support WAF products that protect Amazon services from abuse, drive adoption, evaluate or tune rules * Develop and update SQL queries to investigate security incidents, analyze log data, and extract relevant information from logs, databases and services. A day in the life As a Security Incident Response Engineer, you'll guide our team through complex security challenges impacting millions of customers. You'll: • Spearhead end-to-end incident response across Amazon's device ecosystem • Drive real-time decision-making during active incidents • Conduct impact assessments and implement containment strategies • Develop durable solutions with engineering teams • Proactively hunt threats and create new detection mechanisms • Consult on security for new product designs • Analyze data to identify hidden vulnerabilities We seek naturally curious problem-solvers who combine technical expertise with investigative instincts. You'll be the calm voice in the storm, transforming chaos into clarity and consistently safeguarding our customers' trust in Amazon's devices and services. About the team We're a tight-knit group of Security Engineers united by our mission to protect Amazon's customers. Though small, our impact is outsized. We've driven meaningful improvements across Amazon's device ecosystem through technical excellence and relentless customer advocacy. We're engineers first, approaching challenges with security expertise to create practical solutions. We champion \"better products\" over \"more products,\" solving problems collaboratively with empathy and partnership. We're not the team that just says \"no\" – we find secure paths forward. When incidents arise, we need our builders to feel relief when we arrive. We build bridges, not ivory towers, transforming security from a barrier into an enabler of innovation. Basic Qualifications: - * 5+ years of industry experience in cybersecurity, with a strong foundation in incident response, detection engineering, or security operations - * Working knowledge of AWS, WAF, EDR/XDR tools, network telemetry, and log analysis - * Practical knowledge of attacker tactics, techniques, and procedures (TTPs), with experience leveraging MITRE ATT&CK or similar frameworks to guide incident response or detection engineering - * Strong interpersonal and communication skills; able to calmly manage high-stakes coordination and decision-making - * Proficiency with scripting or automation (e.g., Python, PowerShell, Bash) Preferred Qualifications: - * Proficiency with at least one SIEM platform, including writing searches, creating alerts, and analyzing log data to support security investigations; experience with Splunk strongly preferred - * Exposure to AI/ML-driven anomaly detection, or behavior modeling tools - * Demonstrated ability to use forensic or threat hunting techniques to identify adversary behavior, detect anomalies, analyze potential malware to support containment and eradication - * Security certifications such as CISSP, CISM, CRISC, GCIH, CCIR, GCDA, etc. - * Prior experience in large enterprise environments or supporting multiple business lines - * Experience securing or responding to incidents in large-scale distributed systems, including cloud-native architectures and service-oriented environments - * Experience with IOT device security and embedded systems forensics Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Incident Response Engineer, Devices & Services Security at Amazon.com Services LLC. Skills: Incident response, Security engineering, Detection engineering. Investigate security incidents. Respond to security incidents", "postedDate" : "2026-06-13T10:06:54.792", "createdAt" : "2026-06-13T10:06:54.792", "lastUpdated" : "2026-06-15T08:13:32.312", "ingestTimestamp" : "2026-06-13T10:06:54.792", "mongoId" : "68c2e423f8b1b0376634c56d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072356/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries", "Judgment under pressure", "Calmness", "Incident response", "Security engineering", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis", "Runbook development", "Playbook tuning", "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems", "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA", "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "skillCount" : 42, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1226.6797, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "6a2a660374d8ee00a062b79c", "title" : "Security Engineer II", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T04:42:00.008", "fingerprint" : "6ade78345382678e157f7cbaad40af04785c06071c9e75e50b761acbf3b7d3b3", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10444035/apply", "externalId" : "c52e1daa-a51a-4e95-b1a2-ddd00bbababc", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" }, { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Austin, Texas, United States; Arlington, Virginia, United States; Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Ruby, Go, Swift, Java, .Net, C++, HTTP, DNS, TCP/IP", "professionalSkills" : [ "Risk assessment", "Security best practices", "Network security", "Identity management", "Secure system configurations" ], "hardSkillsList" : [ "Vulnerability assessment", "Security alert triage", "Risk identification", "Threat modeling" ], "hardSkills" : [ { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Security alert triage", "level" : "intermediate" }, { "name" : "Risk identification", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" } ], "majorSkills" : "Security operations, Incident response, Detection and monitoring", "majorSkillsList" : [ "Security operations", "Incident response", "Detection and monitoring" ], "coreResponsibilities" : "Evaluate vulnerability reports, Evaluate security alerts, Evaluate customer issues, Triage security alerts, Understand security alerts, Improve security alerts, Perform risk assessments, Identify security vulnerabilities, Advise engineering teams, Advise stakeholders, Integrate security solutions, Integrate security controls, Support security incident investigations, Provide ad hoc support, Drive security automation efforts, Monitor security risks, Triage security risks, Alert on security risks", "teamCollaboration" : "Cross-team coordination; Work with executives; Work with Legal; Work with business leaders; Work with technical leaders; Work with detection organizations; Work with security engineers", "domainKnowledge" : "Healthcare data; Protected health information; HIPAA regulations", "domainList" : [ "healthcare-data", "protected-health-information", "hipaa-regulations" ], "domainSpecificKnowledge" : [ "Healthcare data", "Protected health information", "HIPAA regulations" ], "innovationCreativity" : "Define new ways to detect activities", "problemSolvingSkills" : "Issue resolution", "specialRequirements" : "On-call rotation, Ad hoc support during non-business hours", "qualificationsBasic" : "2+ years programming experience, Bachelor's degree in computer science, Knowledge of networking protocols, Experience applying threat modeling", "qualificationsPreferred" : "2+ years threat modeling experience, 2+ years secure coding experience, 2+ years identity management experience, 2+ years software development experience, 2+ years cryptography experience, 2+ years system administration experience, 2+ years network security experience, Experience with AWS products, Experience with Python, Experience with Java, Experience with C++, Experience or understanding of HIPAA regulations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Healthcare Security's (HealthSec) Security Operations team is hiring a Security Engineer to be the first line of defense to our most critical customer data. You will be a guardian of healthcare information and work with Amazon Healthcare products to secure customer data. You will drive cross-team coordination, detection and monitoring management, and incident response for all of our medical related services. You will communicate and work with executives, Legal, and other key business and technical leaders to drive resolution of issues. You will get to work closely with our detection and monitoring organizations to define new ways to detect activities that may impact our customers and their health records. You will also get to work with other Security engineers from across HealthSec to drive new solutions into our systems to help secure data at a design and implementation level. Key job responsibilities Evaluate vulnerability reports, security alerts, and customer issues Work alongside our Detection and Monitoring team to triage, understand, and improve security alerts Perform risk assessments and identify security vulnerabilities in workflows  Advise engineering teams and stakeholders on security best practices including network security, identity management, and secure system configurations Collaborate with product development teams to integrate security solutions and controls  Support security incident investigations related to infrastructure  Participate in an on-call rotation and provide ad hoc support to customers during non-business hours Drive security automation efforts including monitoring, triage, and alerting for key security risks  A day in the life The HealthSec team is dedicated to protecting sensitive healthcare data and ensuring patient privacy across Amazon's healthcare services. We build and maintain security controls that safeguard protected health information while enabling innovation in healthcare technology. Amazon Security offers talented security professionals the chance to accelerate their careers with opportunities across cloud, devices, retail, entertainment, healthcare, operations, and physical stores.  About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 2+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Experience applying threat modeling or other risk identification techniques or equivalent Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ - Experience or understanding of HIPAA regulations Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Austin - 159,300.00 - 202,400.00 USD annually USA, VA, Arlington - 159,300.00 - 202,400.00 USD annually USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II at Amazon.com Services LLC. Skills: Security operations, Incident response, Detection and monitoring. Evaluate vulnerability reports. Evaluate security alerts", "postedDate" : "2026-06-13T10:41:35.361", "createdAt" : "2026-06-13T10:41:35.361", "lastUpdated" : "2026-06-15T04:42:00.008", "ingestTimestamp" : "2026-06-13T10:41:35.361", "mongoId" : "6a2a660374d8ee00a062b79c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10444035/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability assessment", "Security alert triage", "Risk identification", "Threat modeling", "Security operations", "Incident response", "Detection and monitoring", "Risk assessment", "Security best practices", "Network security", "Identity management", "Secure system configurations", "Healthcare data", "Protected health information", "HIPAA regulations" ], "skillCount" : 15, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1215.7963, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare" }, { "id" : "6a2a660674d8ee00a062b8f8", "title" : "Security & Compliance Engineer II", "company" : "AWS Security Assurance Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "CISSP", "CCSP", "AWS Certified Security - Specialty" ], "timestamp" : "2026-06-15T06:31:44.183", "fingerprint" : "0d90abc24fdff35280aefc5bc42e0cc7932e3c20912ac6b16114c18b5c277453", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443644/apply", "externalId" : "5146736b-b387-4c15-adf7-0e67fd78f45f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Security compliance, Threat modeling, Incident response, Security automation, Penetration testing, Security architecture, AWS, Python, Bash", "professionalSkills" : [ "Risk assessment", "Security analysis", "System design" ], "hardSkillsList" : [ "Security engineering", "Compliance auditing", "Vulnerability management", "Forensic analysis" ], "hardSkills" : [ { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Compliance auditing", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Security compliance, Incident response", "majorSkillsList" : [ "Cloud security", "Security compliance", "Incident response" ], "coreResponsibilities" : "Develop and implement security controls, Ensure compliance with security standards, Conduct security risk assessments, Respond to security incidents, Automate security processes, Perform vulnerability assessments, Design secure cloud architectures, Collaborate with engineering teams", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud security best practices; Security compliance frameworks; Threat modeling methodologies; Incident response procedures", "domainList" : [ "cloud-security-best-practices", "security-compliance-frameworks", "threat-modeling-methodologies", "incident-response-procedures" ], "domainSpecificKnowledge" : [ "Cloud security best practices", "Security compliance frameworks", "Threat modeling methodologies", "Incident response procedures" ], "toolProficiency" : [ "AWS security services", "Security automation tools" ], "communicationSkills" : "Technical documentation; Security reports", "documentationSkills" : "Security policies; Procedures; Architecture diagrams", "continuousLearning" : "Security conferences; Training courses", "problemSolvingSkills" : "Root cause analysis; Troubleshooting security issues", "outcomesObjectives" : "Maintain security posture; Reduce security risks; Ensure regulatory compliance", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in security engineering, Experience with cloud security best practices, Experience with security compliance frameworks, Experience with threat modeling, Experience with incident response", "qualificationsPreferred" : "Master's degree in a related field, Experience with AWS security services, Experience with security automation tools, Experience with penetration testing, Experience with security architecture design", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Assurance Services (SAS) is hiring a Security & Compliance Engineer to design, build, and deploy AWS security and compliance solutions for highly regulated customers. You will own engineering deliverables across the full lifecycle — secure design, implementation, testing, deployment, and maintenance — translating compliance frameworks (SOC2, HIPAA, PCI-DSS, CIS, NIST, FedRAMP) into secure-by-design AWS implementations. You will work autonomously within your team, deliver cross-functional projects with partner teams, and drive measurable risk reduction for customers at scale. You’ll write code, ship custom controls, run security investigations, lead design and code reviews on your team, and mentor junior engineers. You will identify systemic issues, propose pragmatic solutions, and improve the team’s mechanisms over time. Key job responsibilities - Lead threat modeling, security design reviews, and architecture reviews for customer engagements; identify and mitigate risks across systems and applications. - Design and implement custom preventive, detective, and proactive controls — Service Control Policies (SCPs), Resource Control Policies (RCPs), policy-as-code (cfn-guard, OPA Rego, Cedar), and automated remediation workflows. - Build secure-by-design Infrastructure-as-Code controls for Landing Zones, AWS Control Tower customizations, Zero-Trust architectures, and AI/ML workloads. - Apply AWS security best practices for authentication and authorization, data handling, least privilege, encryption, micro-segmentation, tagging strategy, and API/MCP integration. - Write and review IaC, scripts, enforcements and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego. - Build continuous compliance monitoring, automated evidence collection, visualization, reporting, and remediation pipelines that hold up in audit. - Integrate custom controls with AWS-native and third-party security and compliance tooling. - Drive emerging-edge ideas into prototyping end-to-end to inform new security and compliance solutions and products. - Identify risks and edge cases; propose implementation paths and go/no-go gates. - Apply systematic approaches to risk identification; propose compensating controls when direct remediation isn’t possible. - Help develop technical content - Identify cross-team patterns, gaps, improvements. - Travel to customer sites as needed. About the team The AWS Security Assurance Services team, within AWS Support, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads requires reliable delivery of bar-raising security outcomes and investment in security mechanisms and automation on behalf of our customers. AWS Security Assurance Services LLC, a PCI-QSAC and HITRUST External Assessor Firm, is a team of industry-certified assessors and Compliance Engineers with DevOps and Cloud Infrastructure Architect backgrounds, helping our customers achieve, maintain, and automate compliance in the cloud by tying applicable audit standards to AWS service-specific features and functionality. The SAS team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) - 2+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience - Experience with threat modeling and penetration testing, or experience that includes strong analytical skills, attention to detail, and effective communication abilities - Experience conveying complex technical concepts to both technical and business audiences - Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development - • Demonstrated ability to write and review code, scripts, IaC, and detections in support of security defenses. - • Demonstrated ability to lead security investigations and resolve root causes of operational and security issues. - • Demonstrated ability to mentor peers, drive consensus on conflicting design or implementation feedback, and provide meaningful review feedback. Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing - Experience in supporting audit defense - Experience in mentoring, leading, or managing more junior engineers - Experience writing technical articles, speaking at technology conferences, and contributing to open source - • 5+ years as a technical specialist, including 3+ years in secure coding, software development, cloud security engineering, or related work - • Strong programming and scripting skills in Python, TypeScript, Node.js, Go, Java, or .NET. - • Hands-on Infrastructure-as-Code skills in Terraform, AWS CDK, or CloudFormation. - • Hands-on experience with AWS security and governance services: Config, Security Hub, IAM, KMS, VPC, Lambda, CloudTrail, CloudWatch/EventBridge. - • Experience deploying SCPs and RCPs in multi-account AWS Organizations. - • Experience writing and deploying policy-as-code (cfn-guard, OPA Rego, Cedar, or equivalent). - • Experience designing CI/CD pipelines for security or compliance control deployment. - • Experience with AWS Control Tower customizations, Landing Zones, or Zero-Trust architectures. - • Working knowledge of at least one compliance framework: SOC2, HIPAA, PCI-DSS, CIS, or NIST. - • Spec-driven development; AI agentic design and Model Context Protocol (MCP) experience. - • Industry and AWS certifications: AWS Solutions Architect Associate or Professional, AWS Security Specialty, CISSP, or equivalent. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TN, Nashville - 137,600.00 - 184,000.00 USD annually USA, TX, Austin - 159,300.00 - 202,400.00 USD annually USA, TX, Dallas - 159,300.00 - 202,400.00 USD annually USA, TX, Houston - 159,300.00 - 202,400.00 USD annually USA, VA, Arlington - 159,300.00 - 202,400.00 USD annually USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security & Compliance Engineer II at AWS Security Assurance Services LLC. Skills: Cloud security, Security compliance, Incident response. Develop and implement security controls. Ensure compliance with security standards", "postedDate" : "2026-06-13T18:51:00.801", "createdAt" : "2026-06-13T18:51:00.801", "lastUpdated" : "2026-06-15T06:31:44.183", "ingestTimestamp" : "2026-06-13T18:51:00.801", "mongoId" : "6a2a660674d8ee00a062b8f8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443644/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security engineering", "Compliance auditing", "Vulnerability management", "Forensic analysis", "Cloud security", "Security compliance", "Incident response", "Risk assessment", "Security analysis", "System design", "Cloud security best practices", "Security compliance frameworks", "Threat modeling methodologies", "Incident response procedures", "CISSP", "CCSP", "AWS Certified Security - Specialty", "AWS security services", "Security automation tools" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1210.891, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2176d674d8ee00a0c1b0db", "title" : "Security Engineer II", "company" : "Amazon Corporate Services Pty Ltd", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Engineer II in Melbourne, Australia, adjusted for Amazon's size and the technology industry." }, "location" : "Melbourne, Victoria, AUS", "locations" : [ "Melbourne, Victoria, AUS" ], "timestamp" : "2026-06-15T02:12:49.516", "fingerprint" : "72026e20aa1c95b7f3312bc06f01cf27b527629210883bfcfe145fa18f6670c3", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10438284/apply", "externalId" : "b5b51e2e-dc4e-401b-b873-942ccc3c81f7", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Melbourne", "state" : "Victoria", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-37.8142454,144.9631732" } ], "locationText" : "Melbourne, Victoria, Australia", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Ruby, Go, Swift, Java, .Net, C++, AWS", "professionalSkills" : [ "Incident response", "Threat detection", "Threat investigation", "Threat disruption", "Host forensics", "Security automation", "Security investigations", "Security code review", "Threat intelligence analysis", "Security design review", "Threat modeling", "Secure code review", "Security testing" ], "hardSkillsList" : [ "Malware analysis", "Phishing analysis", "Credential compromise analysis", "Forensics", "Log analysis", "Automation" ], "hardSkills" : [ { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Phishing analysis", "level" : "intermediate" }, { "name" : "Credential compromise analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "majorSkills" : "Incident response, Security automation, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security automation", "Threat intelligence" ], "coreResponsibilities" : "Lead security investigations end-to-end, Investigate with depth, Document investigations, Own investigations through resolution, Triage security candidates, Analyze open source threat intelligence, Validate threat intelligence, Proactively block threats, Author agent investigation user stories, Validate agent investigations, Design guardrails, Test guardrails, Design tactical scripts, Build detection rules, Build response automations, Drive automation into agentic capabilities, Participate in on-call rotation, Own queue for shift, Monitor operational health, Maintain readiness, Execute clean shift handoffs, Document active investigations, Flag anomalies, Transfer ticket ownership", "teamCollaboration" : "Global follow-the-sun team; Cross-functional teams", "domainKnowledge" : "Adversary tradecraft; Corporate infrastructure security; Malware campaigns; Phishing attacks; Credential compromise; Novel attack patterns; Agentic investigation platform; Autonomous agents; Networking protocols; HTTP(S); DNS; TCP/IP; Software development lifecycle", "domainList" : [ "adversary-tradecraft", "corporate-infrastructure-security", "malware-campaigns", "phishing-attacks", "credential-compromise", "novel-attack-patterns", "agentic-investigation-platform", "autonomous-agents", "networking-protocols", "http-s", "dns", "tcp-ip", "software-development-lifecycle" ], "domainSpecificKnowledge" : [ "Adversary tradecraft", "Corporate infrastructure security", "Malware campaigns", "Phishing attacks", "Credential compromise", "Novel attack patterns", "Agentic investigation platform", "Autonomous agents", "Networking protocols", "HTTP(S)", "DNS", "TCP/IP", "Software development lifecycle" ], "documentationSkills" : "Documenting investigations", "innovationCreativity" : "Design and build tooling; Programmatic automation at scale; Feed patterns into next generation autonomous investigation", "problemSolvingSkills" : "Troubleshooting systems issues; Analyzing logs; Root cause analysis", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "3+ years programming Python, Ruby, Go, Swift, Java, .Net, C++, 2+ years scripting, programming, security code review, 2+ years troubleshooting systems issues, analyzing logs, automating tasks, Bachelor's degree STEM or IT Security experience, Knowledge of industry-based security vulnerabilities, Knowledge of remediation techniques", "qualificationsPreferred" : "Knowledge of command line tools, Knowledge of networking protocols, Experience with AWS products, Experience with AWS services, Experience performing security activities SDLC, Security design review experience, Threat modeling experience, Secure code review experience, Security testing experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Corporate Security Response is looking for a Security Engineer who thrives at the intersection of hands-on incident response and intelligent automation. You must think like both an attacker and a defender — understanding adversary tradecraft to detect, investigate, and disrupt threats across Amazon's corporate infrastructure at massive scale. You'll investigate active threats — malware campaigns, phishing attacks, credential compromise, and novel attack patterns — while simultaneously shaping an agentic investigation platform that scales our response capability beyond what any human team could achieve alone. You will independently lead security investigations from detection through containment and remediation. You'll extract IOCs, perform host forensics, scope impact across multiple data sources, check for lateral movement, and drive security issues to resolution — documenting every step as the investigation unfolds. You'll also serve as a demanding customer and quality owner of our AI-powered investigation platform, authoring the investigation user stories that define how autonomous agents analyze threats, designing the guardrails that keep them safe, and validating that automated output meets the same standard a skilled human investigator would produce. When you identify gaps in our capabilities, you won't wait — you'll quickly design and build tooling that enables programmatic automation at scale, then feed those patterns into the next generation of autonomous investigation. Key job responsibilities * Lead Sev2 security investigations end-to-end: acknowledge, investigate with depth (not speed), document as you go, and own through resolution * Triage Sev2 candidates — promote decisively when indicators are clear, downgrade with documented rationale when they're not * Analyze open source threat intelligence — these reports contain temporal IOCs that decay with age, making rapid validation and proactive blocking critical * Author and validate agent investigation user stories, ensuring autonomous investigations match human-quality rigor * Design and test guardrails and policies — think about how attackers would evade detection, how edge cases produce incorrect results, and how agents might fail in ways developers didn't anticipate * Build tactical scripts, detection rules, and response automations that address immediate operational gaps — then drive their transition into scalable agentic capabilities * Participate in a global on-call rotation: own the queue for your shift, monitor operational health, and maintain readiness * Execute clean shift handoffs: document active investigations, flag anomalies observed during your shift, and explicitly transfer ticket ownership About the team CorpSec Response operates 24/7 as a global, follow-the-sun team protecting Amazon's corporate infrastructure. We combine deep human expertise with leading autonomous investigation capabilities. Our engineers are hands-on investigators who also shape the AI systems that augment their work — creating a unique feedback loop between human security expertise and machine-scale automation. Inclusive Team Culture We are committed to building a diverse and inclusive team. Amazon's culture of inclusion is reinforced within our Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work-Life Balance We value sustainable performance. Our follow-the-sun model means you're not carrying a pager 24/7 — your node owns its shift, and clean handoffs are a core operational discipline. Growth and Impact This role offers a rare combination: hands-on technical security work at massive scale, leadership of a high-performing team, and direct influence over an AI-augmented security platform. You'll grow as both a security practitioner and a technical leader. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer II at Amazon Corporate Services Pty Ltd. Skills: Incident response, Security automation, Threat intelligence. Lead security investigations end-to-end. Investigate with depth", "postedDate" : "2026-06-13T10:19:37.072", "createdAt" : "2026-06-13T10:19:37.072", "lastUpdated" : "2026-06-15T02:12:49.516", "ingestTimestamp" : "2026-06-13T10:19:37.072", "mongoId" : "6a2176d674d8ee00a0c1b0db", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10438284/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Malware analysis", "Phishing analysis", "Credential compromise analysis", "Forensics", "Log analysis", "Automation", "Incident response", "Security automation", "Threat intelligence", "Threat detection", "Threat investigation", "Threat disruption", "Host forensics", "Security investigations", "Security code review", "Threat intelligence analysis", "Security design review", "Threat modeling", "Secure code review", "Security testing", "Adversary tradecraft", "Corporate infrastructure security", "Malware campaigns", "Phishing attacks", "Credential compromise", "Novel attack patterns", "Agentic investigation platform", "Autonomous agents", "Networking protocols", "HTTP(S)", "DNS", "TCP/IP", "Software development lifecycle" ], "skillCount" : 33, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1199.8201, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a30704bf292fd229cff307e", "title" : "Senior Security Operations Analyst", "company" : "NuHarbor Security", "industry" : "Cybersecurity", "salary" : { "min" : 110000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote", "Vermont", "United States" ], "certifications" : [ "Relevant industry certifications" ], "timestamp" : "2026-06-16T11:21:20.145", "fingerprint" : "3beb472f9b9441ed873cd3e0d296125167bd0a272c7086b41fed4fc363a7dc2c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.nuharborsecurity.com/careers?gh_jid=7988994", "externalId" : "7988994", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, EDR, Identity telemetry, CrowdStrike, Microsoft Defender, Microsoft Sentinel, Splunk Enterprise Security, Python, PowerShell", "professionalSkills" : [ "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement" ], "hardSkillsList" : [ "Security event triaging", "Threat hunting", "Scripting" ], "softSkillsList" : [ "Mentorship" ], "hardSkills" : [ { "name" : "Security event triaging", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentorship" } ], "majorSkills" : "Security Operations, Incident Response, Threat Analysis", "majorSkillsList" : [ "Security Operations", "Incident Response", "Threat Analysis" ], "coreResponsibilities" : "Own investigations end-to-end, Conduct root cause analysis, Reconstruct attack chains, Produce client-ready written narrative, Correlate across SIEM, EDR, and identity telemetry, Identify what alerts missed, Self-assign to difficult work, Deliver work reflecting technical excellence, Support Security Analyst team, Triage alerts, Classify alerts, Dispose alerts, Escalate alerts within SLA, Identify security gaps, Communicate security mitigations, Communicate proactively with Manager, Facilitate client-facing meetings, Produce ticket documentation, Include evidence trail in tickets, Include analyst reasoning in tickets, Include disposition rationale in tickets, Include plain-language client summary, Remain current on emerging threats, Remain current on CVEs, Remain current on attacker techniques, Support onboarding of new clients, Train junior analysts, Mentor junior analysts, Support junior analysts, Coach on investigation methodology, Coach on documentation standards, Coach on client communication, Review escalations from junior analysts, Ensure investigative completeness, Ensure documentation quality, Develop automation playbooks, Refine automation playbooks, Contribute tuning feedback, Contribute noise identification, Contribute alert fidelity assessments, Develop recommendations for client cybersecurity program, Develop enhancements for client cybersecurity program, Coordinate with NuHarbor clients, Coordinate with internal stakeholders during incident response, Coordinate with internal stakeholders after incident response", "teamCollaboration" : "Security Operations team; Detection Engineering program; Internal stakeholders", "projectManagementSkills" : [ "Incident response management" ], "domainKnowledge" : "Cybersecurity services; SOC operations; MSSP environment; Endpoint Detection and Response", "domainList" : [ "cybersecurity-services", "soc-operations", "mssp-environment", "endpoint-detection-and-response" ], "domainSpecificKnowledge" : [ "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response" ], "toolProficiency" : [ "SIEM", "EDR", "SOAR" ], "communicationSkills" : "Client-ready documentation; Client-facing meetings; Incident briefings; Escalation reviews; Threat landscape discussions; Plain-language client summary", "documentationSkills" : "Client-ready documentation; Runbooks; Support procedures; Ticket documentation", "continuousLearning" : "Remain current on emerging threats; Remain current on CVEs; Remain current on attacker techniques", "innovationCreativity" : "Develop automation playbooks; Refine automation playbooks", "problemSolvingSkills" : "Deep investigations; Root cause analysis; Attack chain reconstruction; Identify what alerts missed; Self-assign to complex problems; Troubleshooting", "specialRequirements" : "Work Sunday - Thursday, 8:30am - 5:00pm, Authorized to work within the United States", "outcomesObjectives" : "Improve cybersecurity of clients; Deliver work that reflects technical excellence; Deliver work that reflects client outcomes", "qualificationsBasic" : "Bachelor's Degree and five (5) years of experience in cybersecurity, Relevant industry certifications, Demonstrated experience with SOC operations, Executing security event triaging and tuning, Demonstrated experience writing runbooks and support procedures, Demonstrated experience executing Monitoring and Response, Containment, eradication, and recovery experience, Demonstrated experience with threat hunting, Hands on experience with at least two EDR/SOAR solutions, Demonstrated experience with scripting in Python, PowerShell, or equivalent, Excellent written and verbal communication skills, Previous experience in technical support or security-focused role, Authorized to work within the United States", "qualificationsPreferred" : "Bachelor's Degree and seven (7) or more years of experience in cybersecurity, Progressive cybersecurity disciplines experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "The Company Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We’re growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission. The Role The Senior Security Analyst is a senior individual contributor within the NuHarbor Managed Services Security Operations team. This role serves as the technical anchor on shift, conducting deep investigations, producing client-ready documentation, and actively raising the quality of the team's work through mentorship and technical shift ownership. Senior Security Analysts are expected to operate with minimal direction, self-assign to the most complex open problems, and deliver work that reflects NuHarbor's commitment to technical excellence and client outcomes. . What you’ll do Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House. Own investigations end-to-end from initial alert through root cause analysis, attack chain reconstruction, and client-ready written narrative. Correlate across SIEM, EDR, and identity telemetry to identify what alerts missed, not just what they flagged. Self-assign to difficult, ambiguous, or high-priority work without requiring direction, including work that falls outside defined lanes. Support the Security Analyst team with alert triage, classification, disposition, and escalation within SLA requirements. Identify and communicate security gaps and mitigations in the context of client environments. Communicate proactively with the Security Operations Manager on active threats, escalations, and items requiring leadership visibility. Facilitate client-facing meetings including incident briefings, escalation reviews, and threat landscape discussions. Produce ticket documentation that requires no editorial cleanup, every ticket must include an evidence trail, analyst reasoning, disposition rationale, and a plain-language client summary Remain current on emerging threats, CVEs, and attacker techniques relevant to client environments. Support the onboarding of new clients onto NuHarbor Security Services and Platforms. Train, mentor, and support junior analysts, including structured coaching on investigation methodology, documentation standards, and client communication. Review escalations to clients from junior analysts prior to client delivery, ensuring investigative completeness and documentation quality. Develop and refine automation playbooks to reduce alert volume and improve analyst workflow. Contribute tuning feedback, noise identification, and alert fidelity assessments to the Detection Engineering program, in coordination with DE leadership. Develop recommendations and enhancements to mature a client’s cybersecurity program. Coordinate with NuHarbor clients and internal stakeholders during and after incident response activities. Your foundation. The requirements for this role: Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications. In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required. Demonstrated experience with SOC operations, executing security event triaging and tuning. Demonstrated experience writing runbooks and support procedures. Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment. Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset. Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions. CrowdStrike Microsoft Defender Microsoft Sentinel Splunk Enterprise Security Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions. Excellent written and verbal communication skills. Previous experience in technical support or security-focused role. Willing and able to work Sunday - Thursday, 8:30am - 5:00pm. Must be authorized to work within the United States. Additional capabilities that will differentiate you for this role: Bachelor’s Degree and seven (7) or more years of experience in cybersecurity with progressive responsibility in SOC, MDR, or MSSP environment. Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.) Demonstrated experience communicating and presenting to executive level client stakeholders. Technical writing and reporting experience. Experience executing initial triaging and response through a SOAR platform. Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems. Experience with memory and storage forensics. Experience with static and dynamic malware analysis. Demonstrated ability to translate complex technical findings into clear, business-relevant narratives for non-technical audiences. Experience with data science techniques (clustering, anomaly detection, data normalization, etc. General systems administrator experience. Fluency with the MITRE ATT&CK framework as an active investigation and communication tool. Experience working in multiple cybersecurity disciplines (i. e. Penetration Testing, Threat, Information Assurance, Engineering, etc.) The Rewards What you can expect: The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market. An organization that recognizes and rewards employee commitment and contribution to our customers’ satisfaction and success Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption. A collaborative and driven working environment in a rapidly growing company and market A fun and social working environment where you are encouraged to be your true self. You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO. The salary for this role is targeted in the 110K - 135K, based on Burlington, VT salaries. Geographical location will be taken into consideration in salary offer. We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you’d like to be a part of, we‘d like to hear from you. AAP/EEO Statement The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled. NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.", "summaryDescription" : "Senior Security Operations Analyst at NuHarbor Security. Skills: Security Operations, Incident Response, Threat Analysis. Own investigations end-to-end. Conduct root cause analysis", "postedDate" : "2026-06-16T01:19:48.332", "createdAt" : "2026-06-16T01:19:48.332", "lastUpdated" : "2026-06-16T11:21:20.145", "ingestTimestamp" : "2026-06-16T01:19:48.332", "mongoId" : "6a30704bf292fd229cff307e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 110000, "salaryAnnualMax" : 135000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security event triaging", "Threat hunting", "Scripting", "Mentorship", "Security Operations", "Incident Response", "Threat Analysis", "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement", "Incident response management", "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response", "Relevant industry certifications", "SIEM", "EDR", "SOAR" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1199.4836, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305a35f292fd229cf4e392", "title" : "Security Guard", "industry" : "Glassboro", "salary" : { "min" : 18.5, "max" : 18.5, "currency" : "USD", "frequency" : "bi-week-salary" }, "location" : "Glassboro, New Jersey", "locations" : [ "Glassboro, New Jersey" ], "certifications" : [ "Formal security training", "Security certifications" ], "timestamp" : "2026-06-16T12:49:33.227", "fingerprint" : "699b14726ecbdf3b8941e5afdab9904003e40c9cb34e53e0c3506ea6917cd09c", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/restore-dispensaries/a3b3f556-d5a0-4227-a03e-744cf582e5f5/apply", "externalId" : "a3b3f556-d5a0-4227-a03e-744cf582e5f5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Glassboro", "state" : "New Jersey", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.7027677,-75.1119434" } ], "locationText" : "Glassboro, New Jersey, United States", "employmentType" : "PART_TIME", "minimumEducation" : "High School", "technicalSkills" : "CCTV systems, Surveillance monitoring", "professionalSkills" : [ "Conflict resolution", "Asset protection" ], "hardSkillsList" : [ "Access control", "Inventory transfer", "Incident documentation" ], "softSkillsList" : [ "Discretion", "Confidentiality", "Adaptability", "Decision-making" ], "hardSkills" : [ { "name" : "Access control", "level" : "intermediate" }, { "name" : "Inventory transfer", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Discretion" }, { "name" : "Confidentiality" }, { "name" : "Adaptability" }, { "name" : "Decision-making" } ], "majorSkills" : "Site security, Access control, Incident response", "majorSkillsList" : [ "Site security", "Access control", "Incident response" ], "coreResponsibilities" : "Maintain site security protocols, Monitor restricted access areas, Verify credentials upon entry, Conduct routine inspections, Supervise CCTV systems, Monitor live surveillance feeds, Support product deliveries, Ensure secure transfer of inventory, Maintain strict access control, Maintain visitor logs, De-escalate tense situations, Protect company assets, Protect patients, Protect team members, Coordinate with management, Complete incident documentation", "teamCollaboration" : "Coordinate with management; Respectful communication with staff", "domainKnowledge" : "Company policy; State regulations; Regulated industries", "domainList" : [ "company-policy", "state-regulations", "regulated-industries" ], "domainSpecificKnowledge" : [ "Company policy", "State regulations", "Regulated industries" ], "toolProficiency" : [ "CCTV systems" ], "communicationSkills" : "De-escalation skills; Respectful communication", "documentationSkills" : "Incident documentation", "problemSolvingSkills" : "Decision-making", "specialRequirements" : "Flexibility to work rotating shifts, Comfort working in dynamic retail environment", "outcomesObjectives" : "Protect company assets; Protect patients; Protect team members", "qualificationsBasic" : "Prior experience in security, Observational skills, Attention to detail, Ability to remain calm, Ability to follow structured protocols, Ability to work rotating shifts", "qualificationsPreferred" : "Experience with CCTV systems, Experience with surveillance monitoring, Formal security training, Security certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Key Responsibilities Maintain site security protocols in accordance with company policy and state regulations Monitor restricted access areas and verify credentials upon entry Conduct routine interior and exterior perimeter inspections Supervise CCTV systems and monitor live surveillance feeds Support product deliveries and ensure secure transfer of inventory Maintain strict access control and visitor logs De-escalate tense or potentially risky situations using professional conflict-resolution techniques Protect company assets, patients, and team members Coordinate with management regarding security concerns or incidents Complete required incident documentation accurately and promptly Maintain a visible, professional presence at the storefront ## Required Qualifications Prior experience in security, loss prevention, or related protective services role Strong observational skills and attention to detail Ability to remain calm and professional in high-pressure situations Experience with CCTV systems or surveillance monitoring preferred Strong communication and de-escalation skills Ability to follow structured protocols and regulatory requirements Flexibility to work rotating shifts, including opening and closing ## What You Bring Accountability Commitment to safety and compliance Reliability and punctuality Strong sense of responsibility for asset protection Professionalism Calm and composed demeanor Respectful communication with patients and staff Discretion and confidentiality Adaptability Ability to assess evolving situations Quick, sound decision-making Comfort working in a dynamic retail environment ## Bonus If You Have Experience in regulated industries (cannabis, pharmacy, banking, etc.) Formal security training or certifications Proven experience in incident response and documentation Strong situational awareness and a preventative mindset", "summaryDescription" : "Security Guard. Skills: Site security, Access control, Incident response. Maintain site security protocols. Monitor restricted access areas", "postedDate" : "2026-06-15T11:59:33.776", "createdAt" : "2026-06-15T11:59:33.776", "lastUpdated" : "2026-06-16T12:49:33.227", "ingestTimestamp" : "2026-06-16T03:22:21.896", "mongoId" : "6a305a35f292fd229cf4e392", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 18, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Access control", "Inventory transfer", "Incident documentation", "Discretion", "Confidentiality", "Adaptability", "Decision-making", "Site security", "Incident response", "Conflict resolution", "Asset protection", "Company policy", "State regulations", "Regulated industries", "Formal security training", "Security certifications", "CCTV systems" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "_score" : 1183.2662, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Retail", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3056c3f292fd229cf2e4e2", "title" : "Senior Security Architect (m/f/d)", "company" : "Isar Aerospace SE", "industry" : "Technology", "salary" : { "min" : 950000.0, "max" : 1350000.0, "currency" : "NOK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Security Architect in Andenes, Norway, adjusted for senior experience level and the aerospace industry." }, "location" : "Andenes, Nordland, Norway", "locations" : [ "Andenes", "Nordland", "Norway" ], "certifications" : [ "CISSP", "CISM", "OSCP" ], "timestamp" : "2026-06-16T08:01:17.028", "fingerprint" : "d4afaa4d4930740801d776a2213f0ec123b825e62f7fee8b28ff2ba1da3c8cde", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/isaraerospace/jobs/4897729101", "externalId" : "4897729101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Andenes", "state" : "Nordland", "country" : "Norway", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "69.3122989,16.1057085" } ], "locationText" : "Andenes, Nordland, Norway", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Security architecture, Network security, Application security, Cloud security, Identity management, Endpoint security, Adversary emulation, Attack path analysis, Detection engineering, Incident response, Vulnerability management, Threat intelligence, ISO 27001, NIST", "professionalSkills" : [ "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution" ], "hardSkillsList" : [ "Penetration testing", "Security design", "Security operations", "Incident command" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Security design", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident command", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security architecture, Offensive security, Detection engineering, Incident response", "majorSkillsList" : [ "Security architecture", "Offensive security", "Detection engineering", "Incident response" ], "coreResponsibilities" : "Design security architecture, Implement security architecture, Build resilience, Run adversary emulation, Run attack path analysis, Prove controls fire, Prove detections fire, Convert findings into fixes, Convert findings into detections, Convert findings into hardened designs, Develop detection capability, Operationalize detection capability, Tune monitoring, Keep coverage honest, Own technical relationship, Set detection backlog, Set use-case backlog, Hold MSSP to standards, Run MSSP service reviews, Develop incident response plans, Maintain incident response plans, Lead incident handling, Run risk assessments, Run vulnerability assessments, Prioritize gaps, Close gaps, Track emerging threats, Track emerging tactics, Use threat intelligence, Anticipate adversary targeting, Harden systems, Partner with IT teams, Partner with engineering teams, Implement controls, Validate controls, Produce clear documentation, Produce clear standards", "teamCollaboration" : "Cross-functional teams; IT teams; Engineering teams", "projectManagementSkills" : [ "Detection backlog management", "Use-case backlog management", "Incident response planning" ], "domainKnowledge" : "New Space; Space business; Rocket systems; Satellite launch; Low Earth Orbit", "domainList" : [ "new-space", "space-business", "rocket-systems", "satellite-launch", "low-earth-orbit" ], "domainSpecificKnowledge" : [ "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit" ], "toolProficiency" : [ "Azure", "AWS", "CIS Benchmarks" ], "communicationSkills" : "Translate technical risk", "documentationSkills" : "Clear documentation", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Security clearance requirements", "qualificationsBasic" : "10+ years information security, Hands-on depth defending systems, Hands-on depth attacking systems, Build secure architecture, Break secure architecture, Operate across full security stack, Switch context fast, Go deep where problem demands, Design security architecture, Implement security architecture, Detection capability, Incident response capability, Vulnerability management capability, In-depth networking protocols knowledge, In-depth systems architecture knowledge, In-depth core security principles knowledge, In-depth best practices knowledge, High autonomy operation, Take full ownership, Guide others, Excellent communication skills, Excellent collaboration skills, Translate technical risk, Bachelor's degree or equivalent experience, Master's degree or equivalent experience", "qualificationsPreferred" : "Aerospace experience, Defense experience, Regulated environments experience, Safety-critical environments experience, Defensive certifications, Architecture certifications, Offensive certifications, Cloud security depth, Azure security services depth, AWS security services depth, Hardening standards familiarity", "workSiteFlexibility" : "Onsite", "rawDescription" : "Mission Brief You are the guardian and the challenger of our security posture. At Isar Aerospace, the systems that build our rockets are mission critical, and protecting them takes more than good design. It takes someone who will attack their own work to be sure it holds. We are looking for a deeply hands-on Senior Security Architect. You will be in the environment, building and testing our defenses yourself, not directing from the sidelines. You wear two hats: the Defender who designs and operates the controls that keep us safe, and the Adversary who continuously attacks those controls the way a real threat would. You own your work end to end and turn what you find under attack into stronger defenses, sharper detection, and faster response. This is a senior role with one of the broadest mandates on the team. You are the kind of expert who can pick up almost anything we throw at you, from architecture to incident response to offensive testing, and go deep where it matters. A versatile generalist with real depth, not a narrow specialist, and a technical anchor others lean on. Your Role in Our Space Mission: Design the Defense: Lead the design and implementation of security architecture across our systems, networks, and applications, building in resilience from the start. Attack What We Build: Run realistic adversary emulation and attack-path analysis against our own environment, prove whether our controls and detections actually fire, and convert every finding into a fix, a new detection, or a hardened design. Own the Detection: Develop and operationalize our detection and response capability, tune monitoring to separate signal from noise, and keep our coverage honest against how attackers actually operate. Direct the MSSP: Own the technical relationship with our managed security provider. Set the detection and use-case backlog, hold them to escalation and response-quality standards, run service reviews, and make sure we get the protection we pay for. Lead the Response: Develop and maintain incident response plans, and lead the handling of incidents from day-to-day alerts through to high-profile events. Hunt and Reduce Risk: Run risk and vulnerability assessments across business-critical infrastructure, then work with stakeholders to prioritize and close the gaps that matter most. Stay Ahead of the Threat: Track emerging threats and tactics, and use threat intelligence to anticipate how an adversary would target us and harden accordingly. Embed Security with Engineering: Partner with IT and engineering teams to implement and validate controls, and produce clear documentation and standards others can execute against. Qualification Checklist Experience: 10+ years in information security, with hands-on depth across both defending and attacking systems. Dual Mindset: You can both build secure architecture and break it under controlled, agreed scope, and you know how to feed one into the other. Versatile Range: Comfortable operating across the full security stack and switching context fast, from design to detection to active testing, while still going deep where the problem demands it. Security Architecture: Proven experience designing and implementing security architecture across networks, cloud, identity, and endpoints. Operational Depth: Strong capability in detection, incident response, and vulnerability management, not just advisory or paper work. Foundations: In-depth knowledge of networking protocols, systems architecture, and core security principles and best practices. Frameworks: Familiarity with industry standards such as ISO 27001 and NIST. Autonomy: Operates with very high autonomy as an internal expert, taking full ownership of their work and guiding others. Communication: Excellent communication and collaboration skills, able to translate technical risk for a range of audiences. Education: Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, or the equivalent through relevant certifications and hands-on experience. Bonus Skills Experience in aerospace, defense, or other regulated, safety-critical environments. Relevant certifications: defensive or architecture (e.g., CISSP, CISM) and offensive (e.g., OSCP or equivalent) are both valued. Cloud security depth in a major platform (Azure or AWS) and its native security services. Familiarity with hardening standards (e.g., CIS Benchmarks) applied in production. Benefits Employee Participation Program: Share in our success through our virtual company share program 6 weeks of vacation: Enjoy the days off to relax and recharge Subsidised lunch: Stay energised with delicious, subsidised lunches every day Relocation support: Benefit from our relocation bonus with deductible expenses up to an agreed amount Wellness allowance: Stay healthy and fit with our yearly allowance for wellness activities (e.g., Gym, Massages) Individual learning allowance: Grow your skills with an individual learning budget granted after the probation period Physical and mental well-being: Access via OpenUp the online support from certified psychologists and lifestyle experts at no cost to you and your family And Much More! Discover additional perks and benefits when you join our team. Who we are We are Isar Aerospace and we are at the forefront of New Space building a modern space business to enable faster, better and cheaper access to space. Our mission is to help democratise space and use it for good in order to improve life on Earth now and for the future generations. We are a fast-growing company aiming to provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites and constellations into Low Earth Orbit. The company is privately funded by world-leading technology investors with strong commitment and support and our team is made of driven and talented people with a real passion for space innovation. We're making rockets in a way that hasn't been done before disrupting a traditional industry. If you are up for the challenge, want to work on cutting-edge projects and be part of a team changing the world for better, come, join us and launch your career! Want to find out more about us? Visit www.isaraerospace.com Data Protection We process your personal data for the purpose of managing the recruitment process and assessing your application. For detailed information on how your data is processed, including your rights, please refer to our Privacy Policy. Disclaimer Isar Aerospace SE is an equal-opportunity employer committed to fairness and inclusivity. We do not prioritize any specific religion, gender, nationality, or background. Due to security clearance requirements, affiliations with countries listed under § 13 para. 1 no. 17 SÜG may affect the application process. All qualified applicants are encouraged to apply. We use Metaview to record interview audio so our team can review it later and stay focused during the conversation. We will record interviews only if you opt in. Please note that we will request your consent separately during the interview process. Participation is completely voluntary and will not affect your application in any way. For more information on how we process your personal data, please see our Privacy Policy.", "summaryDescription" : "Senior Security Architect (m/f/d) at Isar Aerospace SE. Skills: Security architecture, Offensive security, Detection engineering, Incident response. Design security architecture. Implement security architecture", "postedDate" : "2026-06-15T23:17:35.898", "createdAt" : "2026-06-15T23:17:35.898", "lastUpdated" : "2026-06-16T08:01:17.028", "ingestTimestamp" : "2026-06-15T23:17:35.898", "mongoId" : "6a3056c3f292fd229cf2e4e2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Penetration testing", "Security design", "Security operations", "Incident command", "Leadership", "Security architecture", "Offensive security", "Detection engineering", "Incident response", "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution", "Detection backlog management", "Use-case backlog management", "Incident response planning", "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit", "CISSP", "CISM", "OSCP", "Azure", "AWS", "CIS Benchmarks" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1180.1031, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Aerospace", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e412f8b1b0376634c220", "title" : "Security Engineer, AWS Global Services", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Dallas, Texas, USA", "locations" : [ "Dallas, Texas, USA" ], "timestamp" : "2026-06-16T02:15:50.236", "fingerprint" : "3392e875c3aecdd97b186d51b13a88b5b9dcb3ad1bd3555c75bc5b3bde3b9439", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071644/apply", "externalId" : "4623f239-96aa-4999-aa47-0ce9ce373481", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Go, AWS, Cloud security, Security automation, Incident response, Threat modeling, Security architecture, CI/CD, Container security, Infrastructure as code", "professionalSkills" : [ "System design", "Risk assessment", "Security analysis" ], "hardSkillsList" : [ "Security engineering", "Cloud security controls", "Security automation scripting" ], "hardSkills" : [ { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Security automation scripting", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Security engineering, Incident response", "majorSkillsList" : [ "Cloud security", "Security engineering", "Incident response" ], "coreResponsibilities" : "Design and implement security controls, Develop and maintain security automation, Respond to security incidents, Conduct threat modeling exercises, Develop security architecture designs, Collaborate with engineering teams, Improve security posture, Identify and mitigate security risks, Stay current with security threats", "teamCollaboration" : "Engineering teams; Cross-functional teams", "domainKnowledge" : "Cloud security; AWS services; Security best practices; Threat landscape", "domainList" : [ "cloud-security", "aws-services", "security-best-practices", "threat-landscape" ], "domainSpecificKnowledge" : [ "Cloud security", "AWS services", "Security best practices", "Threat landscape" ], "toolProficiency" : [ "AWS security services", "Security tooling" ], "documentationSkills" : "Technical documentation", "continuousLearning" : "Stay current with security threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Improve security posture; Mitigate security risks", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in software development, 3+ years of experience in security engineering, Experience with cloud security controls, Experience with security automation, Experience with incident response, Experience with threat modeling, Experience with security architecture", "qualificationsPreferred" : "Master's degree or PhD in Computer Science or related field, Experience with AWS security services, Experience with security tooling, Experience with programming languages like Python or Go, Experience with CI/CD pipelines, Experience with container security, Experience with infrastructure as code", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale security solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? AWS Security Incident Response Service is seeking a motivated professional who desires to join our global, innovative & high-energy Security team. The right candidate must thrive in high-pressure situations, think like both an attacker & defender, and help relevant teams take the right actions in the right timeframes to mitigate risks. As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Services Security Organization you will have the opportunity to pioneer technically excellent security solutions supporting customer initiatives that are meaningful to their business. As a member of AWS CIRT, you will be able to delight customers with leading edge security incident response via AWS Security Incident Response service and other escalation mechanisms. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. Key job responsibilities • Perform and oversee incident response operations • Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event. • Independently contribute to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities. • Design, build, and deploy solutions to automate security operations and incident response on AWS. • Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers. • Develop high-quality content, such as automation tools, reference architectures, and white papers to help our consultants, partners, and customers build on the work that we deliver. • Innovate on behalf of customers by translating your thoughts into action-oriented results. • Mentor and invest in our employees, partners, and customers to raise the bar for our customers. • Periodic on-call required. A day in the life As a Security Engineer on the proactive side of AWS CIRT, responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team Proactive side of AWS CIRT provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. AWS CIRT enhances existing security capabilities by supporting security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. About AWS Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Completed Bachelor’s Degree in Computer Science, or equivalent experience - Demonstrated experience in a technical field and understanding of security concepts and common security threats in host operating systems (Linux/ Windows), Network security concepts, log analysis and investigation. - Familiarity with at least one functional scripting language (e.g. Python, JavaScript, shell scripting). Preferred Qualifications: - Knowledge of common system security vulnerabilities and remediation techniques. - Understanding of the tools, tactics, and techniques used by threat actors during security events. - Familiarity/experience with AWS services and security concepts. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, AWS Global Services at Amazon Web Services, Inc.. Skills: Cloud security, Security engineering, Incident response. Design and implement security controls. Develop and maintain security automation", "postedDate" : "2026-06-14T19:43:16.913", "createdAt" : "2026-06-14T19:43:16.913", "lastUpdated" : "2026-06-16T02:15:50.236", "ingestTimestamp" : "2026-06-14T19:43:16.913", "mongoId" : "68c2e412f8b1b0376634c220", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071644/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security engineering", "Cloud security controls", "Security automation scripting", "Cloud security", "Incident response", "System design", "Risk assessment", "Security analysis", "AWS services", "Security best practices", "Threat landscape", "AWS security services", "Security tooling" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1175.6129, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e420f8b1b0376634c4fe", "title" : "Security Intelligence Engineer", "company" : "Amazon. com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Annapolis Junction, Maryland, USA", "locations" : [ "Annapolis Junction, Maryland, USA" ], "timestamp" : "2026-06-16T01:05:11.332", "fingerprint" : "9b06336bfcc1bf2363c8f51ef1da42abb8057330354670e1abe99c0c103970f1", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3078108/apply", "externalId" : "bd0f1b1d-a69e-4571-86cb-3486f6a041c0", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis Junction", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1189965,-76.7963417" }, { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" }, { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" }, { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Annapolis Junction, Maryland, United States; Arlington, Virginia, United States; Austin, Texas, United States; Herndon, Virginia, United States; New York, New York, United States; Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Security intelligence, Incident response, Threat modeling, Threat analysis, Security tools, Security technologies, Cloud security, AWS, Azure, GCP, Python, Bash, SIEM platforms, Threat hunting, Network security, Endpoint security, Vulnerability management, Forensics, Malware analysis, Scripting", "professionalSkills" : [ "Analytical thinking", "Problem-solving", "Risk assessment" ], "hardSkillsList" : [ "Security analysis", "Incident management", "Threat intelligence gathering", "Data analysis", "Forensic analysis", "Malware reverse engineering" ], "hardSkills" : [ { "name" : "Security analysis", "level" : "intermediate" }, { "name" : "Incident management", "level" : "intermediate" }, { "name" : "Threat intelligence gathering", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware reverse engineering", "level" : "intermediate" } ], "majorSkills" : "Security intelligence, Incident response, Threat analysis", "majorSkillsList" : [ "Security intelligence", "Incident response", "Threat analysis" ], "coreResponsibilities" : "Develop and implement security intelligence strategies, Monitor security alerts and events, Investigate security incidents, Conduct threat analysis and intelligence gathering, Develop and maintain threat models, Provide security recommendations, Collaborate with incident response teams, Stay current with emerging threats and vulnerabilities, Automate security processes", "teamCollaboration" : "Incident response teams; Security operations center; Engineering teams; Product teams", "domainKnowledge" : "Cyber threats; Adversary tactics; Vulnerabilities; Cloud security; Network security; Endpoint security", "domainList" : [ "cyber-threats", "adversary-tactics", "vulnerabilities", "cloud-security", "network-security", "endpoint-security" ], "domainSpecificKnowledge" : [ "Cyber threats", "Adversary tactics", "Vulnerabilities", "Cloud security", "Network security", "Endpoint security" ], "toolProficiency" : [ "SIEM platforms", "Security tools", "Threat intelligence platforms" ], "communicationSkills" : "Technical reporting; Presenting findings", "documentationSkills" : "Security reports; Process documentation", "continuousLearning" : "Stay current with emerging threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting security issues", "outcomesObjectives" : "Enhance security posture; Reduce security risks; Improve incident detection and response times", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in security engineering, Experience with security intelligence and incident response, Experience with threat modeling and analysis, Experience with security tools and technologies", "qualificationsPreferred" : "Master's degree in a related field, Experience with cloud security (AWS, Azure, GCP), Experience with scripting languages (Python, Bash), Experience with SIEM platforms, Experience with threat hunting", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Annapolis Junction, MD, USA | Arlington, VA, USA | Austin, TX, USA | Herndon, VA, USA | New York, NY, USA | Seattle, WA, USA The AWS Threat Intelligence team, part of Amazon Cyber Threat Intelligence (ACTI), is responsible for developing actionable intelligence on advanced cyber threats to AWS services and AWS customers. We obtain indicators and other intelligence from a variety of internal and external sources and use that information to develop an understanding of sophisticated actors and their tools, techniques, and procedures (TTPs). We leverage that understanding to proactively identify and mitigate malicious activity. The successful candidate will analyze actor TTPs to generate intelligence and insights into current threats. A deep understanding of current cyber threat actors as well as experience performing question-driven analysis is required. As a Security Intelligence Engineer, you will help enhance our capabilities by formulating new analytic techniques and working across teams to drive their supporting capabilities. You will likewise work to harness expansive data sets and generate actionable and unique insights from them using database querying and statistical analysis. Your efforts will help drive innovation and continual improvement in the \"state-of-the-art\" of cyber threat intelligence analysis and dissemination at Amazon. This position requires that the candidate selected be a US Citizen. Key job responsibilities *Perform deep dive analysis of malicious artifacts. *Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities. *Create security techniques and automation for internal use that enable you to operate at high speed and broad scale. *Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats. *Draft and publish finished written threat intelligence products based on findings. *Periodic on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience implementing security solutions at the business division level or equivalent - BS degree in Computer Science, Management of Information Systems (MIS), Computer Engineering, or similar degree, or 3+ years equivalent technology experience without a degree - 3 years experience with tracking high-sophistication cyber threat groups - 3 years experience across system security, network security, application security, and/or digital forensics - 2 years experience with SQL or other relational database query languages. Preferred Qualifications: - Experience with AWS products and services - MS degree in Computer Science, Management of Information Systems (MIS), Computer Engineering, or similar degree. - Strong understanding of Windows, Linux, and or OS X internals - Experience with malware analysis, network flow analysis, and large scale data analysis. - Experience with modern threat intelligence platforms (TIPs), especially the Vertex Project's Synapse - Experience with scripting in the Python programming language. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Intelligence Engineer at Amazon. com Services LLC. Skills: Security intelligence, Incident response, Threat analysis. Develop and implement security intelligence strategies. Monitor security alerts and events", "postedDate" : "2026-06-14T20:26:20.129", "createdAt" : "2026-06-14T20:26:20.129", "lastUpdated" : "2026-06-16T01:05:11.332", "ingestTimestamp" : "2026-06-14T20:26:20.129", "mongoId" : "68c2e420f8b1b0376634c4fe", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3078108/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security analysis", "Incident management", "Threat intelligence gathering", "Data analysis", "Forensic analysis", "Malware reverse engineering", "Security intelligence", "Incident response", "Threat analysis", "Analytical thinking", "Problem-solving", "Risk assessment", "Cyber threats", "Adversary tactics", "Vulnerabilities", "Cloud security", "Network security", "Endpoint security", "SIEM platforms", "Security tools", "Threat intelligence platforms" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1167.5337, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a309c10f292fd229c0f6b25", "title" : "Security Officer II", "company" : "Walden Security", "industry" : "Real Estate", "salary" : { "min" : 16.0, "max" : 20.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Dallas", "locations" : [ "Dallas" ], "certifications" : [ "Security Officer Certification" ], "timestamp" : "2026-06-16T12:28:07.026", "fingerprint" : "3f188ef479ea291e9ede85962d09706a4f996b2611f0feb46f663d67af78cdeb", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/waldensecurity/jobs/5164709007", "externalId" : "5164709007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "minimumEducation" : "High School", "coreResponsibilities" : "Protect client property against fire, Protect client property against vandalism, Protect client property against illegal entry", "continuousLearning" : "Tuition reimbursement; Employee Family Scholarships", "qualificationsBasic" : "Minimum of 18 years of age, Pass criminal background check, Pass drug test", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "What You Will Do Our Security Officers protect the Industrial or Commercial property of our clients against fire, vandalism and illegal entry. Our clients range from Class-A Office Buildings, Luxury Residential Properties, Distilleries, Fortune 500 Companies, Financial Institutions, Telecommunications, Manufacturing/Industrial Factories, Hospitals and many others. Requirements: High School diploma or General Education Degree (GED) Minimum of 18 years of age Ability to pass criminal background check and drug test Same Day Offers: interview with the hiring team and receive an offer to join us the same day! Extensive Training: Our initial training paves the way for you to earn your Security Officer Certification. Walden Security has been recognized by Training Magazine as a Top 100 Award Winner which is awarded to companies with the most successful learning and development programs in the world! Unbelievable PERKS!: Save on phone, vacation, auto, retailers and more! Tuition Reimbursement: we believe in the professional development of our team members and provide annual reimbursement opportunities. Employee Family Scholarship: To date, Walden Security has awarded more than $300,000 in Employee Family Scholarships! Paid Time Off: offered to employees that average at least 32 hours per week Medical, Dental and Vision Insurance: multiple plan options for you and your dependents Health Savings Account: pay for health care more easily Voluntary Life Insurance: affordable plans available 401K: prepare for your retirement Employee Assistance Program: we offer free, confidential assistance for many of your life’s needs Employee Recognition Programs: we believe in celebrating the “wins” with our Walden Security team. We reward the hard work and dedication of our employees through Tenure Recognition, On-The-Spot Bonuses, Officer of the Month and Officer of the Year recognitions which include awards and bonuses Culture of Caring: Walden Security supports many charitable organizations Award Winning Company: Walden Security has earned significant recognition for our better working environment for our officers, better service to our customers and a dedication to quality performance standards. Promote From Within Philosophy: Walden Security offers growth opportunities for our team members who are Setting the Standard by Setting the Example® Flexible Schedules: We offer flexible scheduling with multiple shifts available including First, Second, Third and Weekend Shifts Competitive Pay! #SecurityOfficer #SecurityGuard Pay Rate $16—$20.25 USD We offer every employee — from executive managers to administrative support to security professionals — unique and generous benefits, as well as opportunities for career growth. So if you’re ready to embark on a meaningful career with one of the nation’s most dynamic and fastest growing security companies, apply with Walden Security today.", "summaryDescription" : "Security Officer II at Walden Security. Protect client property against fire. Protect client property against vandalism", "postedDate" : "2026-06-16T03:15:46.892", "createdAt" : "2026-06-16T03:15:46.892", "lastUpdated" : "2026-06-16T12:28:07.026", "ingestTimestamp" : "2026-06-16T03:15:46.892", "mongoId" : "6a309c10f292fd229c0f6b25", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 33280, "salaryAnnualMax" : 41600, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ "Security Officer Certification" ], "skillCount" : 1, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "_score" : 1151.1271, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security", "llmIndustryConfidence" : 0.95 }, { "id" : "68b706967fc9a711f0f6f0fc", "title" : "Sr. Security Engineer, AWS Cloud Security Response", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:44:36.234", "fingerprint" : "8a7a3fd9386f46352c27b51d967635462826361466b369c04fe4a00251d6e89c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3051891/apply", "externalId" : "2298684c-4600-4216-9042-5f7f5e39f8c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Bash scripting, PowerShell scripting, Python scripting, Linux, Unix", "professionalSkills" : [ "Risk assessment", "Information security", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "hardSkillsList" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Coding", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Operating system security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Virtualization technologies", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Cloud Security, Incident Response, Security Engineering, AWS", "majorSkillsList" : [ "Cloud Security", "Incident Response", "Security Engineering", "AWS" ], "coreResponsibilities" : "Manage security and availability of AWS Cloud services, Operate on the ‘AWS’ side of the Shared, Protect customers, Work tactically with internal and external stakeholders, Solve security challenges at massive scale, Think strategically to develop and implement changes, Drive automation, Drive scalability, Drive continuous progress, Assess technical vs. business risks, Drive internal engineering teams to take the right, Mitigate risks, Triage/assess security issues, Engage with internal service teams, Ensure prompt remediation of issues, Escalate internally as necessary, Ensure the right level of urgency and engagement, Participate in efforts to promote security throughout the, Build good working relationships within the team, Build good working relationships with others across Amazon, Develop pragmatic solutions that achieve business requirements, Keep an acceptable level of risk, Help with recruiting activities, Help with administrative work, Mentoring of junior staff, Proactive knowledge sharing within the team, Proactive knowledge sharing across the company, Fulfill regular on-call responsibilities, Supply oversight of in-flight security issues, Triage new incoming issues, Determine the level of risk, Prioritize remediation, Communicate the state of these issues to various, Escalate issues to senior AWS leadership, Explore building and improving our tooling, Share tooling benefits with all our engineers globally, Take handover from the previous site, Be delegated ownership of various security issues, Learn on the go, Engage various stakeholders, Triage new issues, Determine impact level, Work towards resolving them, Document all issues you are tracking", "teamCollaboration" : "Internal stakeholders; External stakeholders; Internal service teams; Senior leadership; Partner teams; Other AWS teams", "projectManagementSkills" : [ "Prioritize multiple tasks", "Manage projects" ], "domainKnowledge" : "AWS Cloud Security; Shared Responsibility Model; Cloud computing; Network security; Operating system security; Cryptography; Software security; Security operations; Incident response; Security intelligence; Web protocols; Linux architecture; Unix architecture", "domainList" : [ "aws-cloud-security", "shared-responsibility-model", "cloud-computing", "network-security", "operating-system-security", "cryptography", "software-security", "security-operations", "incident-response", "security-intelligence", "web-protocols", "linux-architecture", "unix-architecture" ], "domainSpecificKnowledge" : [ "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Web protocols", "Linux architecture", "Unix architecture" ], "toolProficiency" : [ "AWS", "Linux tools", "Unix tools" ], "communicationSkills" : "Oral communication; Written communication; Communicate to leadership", "continuousLearning" : "Learn on the go", "innovationCreativity" : "Develop pragmatic solutions; Explore building and improving tooling", "problemSolvingSkills" : "Troubleshooting; Critical thinking; Creative thinking; Root cause analysis", "specialRequirements" : "On-call responsibilities", "outcomesObjectives" : "Ensure security of the Cloud; Mitigate risks; Drive automation; Drive scalability; Drive continuous progress; Ensure prompt remediation of issues; Achieve business requirements; Keep acceptable level of risk; Ensure customers are put first", "qualificationsBasic" : "BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience, 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security", "qualificationsPreferred" : "2+ years of scripting/coding experience in any language, Previous experience in Python scripting would be ideal, Understanding and experience with implementation of best practices across multiple security disciplines/domains, Strong, proven knowledge of virtualization technologies (AWS preferred), Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, employ critical and creative thinking, Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills, Ability to prioritize multiple tasks and projects in a dynamic environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Cloud Security Response team manages the security and availability of AWS Cloud services. We operate on the ‘AWS’ side of the Shared Responsibility Model to ensure “Security of the Cloud” and to protect our customers. This role requires engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale, and to think strategically to develop and implement changes to drive automation, scalability and continuous progress for the organization. We’re looking for talented software and systems professionals with a passion for security who thrive in high energy environments to help us continue to raise the security bar for cloud computing. Successful candidates should: - be able to assess technical vs. business risks and consistently drive internal engineering teams to take the right actions in the appropriate time frames to mitigate risks. - have a good mix of broad and deep technical knowledge and a demonstrated background in information security. - be technically proficient in the fields of network and operating system security, cryptography, software security, security operations, incident response, and emergent security intelligence. - possess a combination of troubleshooting, technical, and communication skills, as well as the ability to manage a mix of disparate tasks which may include small-project and software development work. - be comfortable challenging and escalating to senior leadership to always ensure the best outcome for customers. An ideal candidate should be able to conduct most of the following: - Triage/assess security issues and engage with internal service teams to ensure prompt remediation of issues, escalating internally as necessary to ensure the right level of urgency and engagement. - Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon. - Demonstrate high ability and tolerance for frequent context switching and interruptions while staying productive and effective. - Develop pragmatic solutions that achieve business requirements while keeping an acceptable level of risk. - Help with recruiting activities and administrative work. - Mentoring of junior staff and proactive knowledge sharing within the team and across the company. - Fulfill regular on-call responsibilities. #SecOps Key job responsibilities - Supply oversight of in-flight security issues. - Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team. - Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including AWS’ Chief Information Security Officer). - Escalate issues to senior AWS leadership if you feel your issues are not being treated at the correct pace due to their impact to ensure that we are putting customers first. - Explore building and improving our tooling to make your own life easier, and at the same time, sharing that benefit with all our engineers globally. A day in the life In the morning you will take handover from the previous site and be delegated ownership of various security issues presently in-flight. The issues could relate to any of our many products, so you will often need to learn on the go. You will engage various stakeholders, such as the internal service team who actually needs to fix the issue, along with AWS Security Leadership, Legal, and the leadership from the impacted service team. As the day progresses, new issues will be automatically assigned to you based on your workload and you will be responsible for triaging them, determining their level of impact, and work towards resolving them at the appropriate pace. We staff a \"follow the sun\" on-call model from multiple geographic locations. At the end of the day, you will document all the issues you are tracking so they can be taken over by the next shift. About the team Cloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations. We work with other AWS teams, to ensure security issues are resolved with the right level of urgency, whilst ensuring that our stakeholders are kept into the loop. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience. - 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security. Preferred Qualifications: - 2+ years of scripting/coding experience in any language (including Bash/PowerShell scripting). Previous experience in Python scripting would be ideal. - Understanding and experience with implementation of best practices across multiple security disciplines/domains. - Strong, proven knowledge of virtualization technologies (AWS preferred), web protocols, common attacks, and Linux/Unix tools and architecture. - Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, and employ critical and creative thinking. - Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills. - Ability to prioritize multiple tasks and projects in a dynamic environment. - Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Sr. Security Engineer, AWS Cloud Security Response at Amazon.com Services LLC. Skills: Cloud Security, Incident Response, Security Engineering, AWS. Manage security and availability of AWS Cloud services. Operate on the ‘AWS’ side of the Shared", "postedDate" : "2026-06-13T05:32:27.074", "createdAt" : "2026-06-13T05:32:27.074", "lastUpdated" : "2026-06-15T02:44:36.234", "ingestTimestamp" : "2026-06-13T05:32:27.074", "mongoId" : "68b706967fc9a711f0f6f0fc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3051891/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies", "Leadership", "Mentoring", "Critical thinking", "Cloud Security", "Incident Response", "Security Engineering", "AWS", "Risk assessment", "Information security", "Prioritize multiple tasks", "Manage projects", "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Web protocols", "Linux architecture", "Unix architecture", "Linux tools", "Unix tools" ], "skillCount" : 31, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1151.0267, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a660b74d8ee00a062bb3b", "title" : "Security Engineer II, Differentiated Security Team (DST)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T03:20:47.936", "fingerprint" : "45972d6aac89d3aca2a1d6a1ca0733530f3f72ceaf73565c82ac22d3f1b80f48", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10442816/apply", "externalId" : "017f6f51-8ab5-42a2-b0fb-34ea723bb042", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Austin, Texas, United States; Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "At Amazon, we obsess over our customers and maintaining their trust. To earn that trust in an environment as vast and varied as Amazon's requires the applied skills of smart security engineers and experienced, innovative security leaders willing to tackle challenges at dizzying scales. We are seeking Security Engineers who want to help secure Amazon. If you're passionate about Information Security, have exceptional technical depth in one or more security domains, and want to join a large-scale, fast-paced organization with global impact on millions of customers, then we'd like to talk to you. We are passionate in our desire to secure Amazon's environments and protect our customers' trust and unflinching in our resolve to hold the security bar high. Key job responsibilities As a Security Engineer on the STRIKE team, you will: • Conduct time-bound (2-4 month) targeted security engagements with business units across Amazon Stores to drive risk remediation • Identify cross-cutting security gaps in differentiated environments and drive remediation to resolution • Partner with core security teams to improve existing security mechanisms and propose new ones when needed • Generate actionable security insights from engagements that inform investment in self-service security capabilities • Enable business units to independently identify and resolve security challenges, reducing long-term dependency on security teams • Act as a Trusted Advisor across the organization, clearly articulating risks to both technical and non-technical audiences A day in the life The STRIKE team (Security Targeted Research, Insights & Key Engagements) is part of the Differentiated Security Team (DST) within Stores Security. We identify areas of differentiated and acute security risk across Amazon Stores and perform targeted engagements with business units to remediate that risk. Through these engagements, we accelerate store builders, improve their security maturity, and generate insights about the efficacy of self-service security that feed back into improving existing or investing in new security mechanisms. Our mission: Remediate differentiated security gaps across Amazon Stores through targeted BU engagements while partnering with core security partner teams to improve existing mechanisms. Our vision: Every differentiated BU security gap is reviewed and remediated. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree in computer science or equivalent - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - Knowledge of networking protocols such as HTTP, DNS and TCP/IP Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Austin - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Differentiated Security Team (DST) at Amazon.com Services LLC", "postedDate" : "2026-06-13T18:19:31.763", "createdAt" : "2026-06-13T18:19:31.763", "lastUpdated" : "2026-06-15T03:20:47.936", "ingestTimestamp" : "2026-06-13T18:19:31.763", "mongoId" : "6a2a660b74d8ee00a062bb3b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10442816/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1142.247, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a09f21e1663d49372a845c6", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon Web Services, Inc.", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:06:55.041", "fingerprint" : "904f0aa67a81b6232f23b2103c3a0821861d5aeddf314d79f37eabe4d6677bc4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "externalId" : "7b963d63-e85c-488e-8ac7-ba83a3f3d74f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI, Amazon Bedrock", "professionalSkills" : [ "Security response", "Software development", "Automation" ], "hardSkillsList" : [ "Software development", "System design", "Automation" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software processes, Design intelligent automations, Implement intelligent automations, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with global teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Leverage AWS services, Create scalable solutions, Enhance security operations, Deliver delightful software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS security; Corporate network security; Security response", "domainList" : [ "aws-security", "corporate-network-security", "security-response" ], "domainSpecificKnowledge" : [ "AWS security", "Corporate network security", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Amazon Bedrock, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon Web Services, Inc.. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T16:08:57.360", "createdAt" : "2026-06-13T16:08:57.360", "lastUpdated" : "2026-06-15T06:06:55.041", "ingestTimestamp" : "2026-06-13T16:08:57.360", "mongoId" : "6a09f21e1663d49372a845c6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Automation", "Security software", "AWS services", "Security response", "AWS security", "Corporate network security" ], "skillCount" : 8, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1127.3672, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2caf9c74d8ee00a09d75bb", "title" : "Senior Security Engineer", "company" : "Ivo", "industry" : "Security", "salary" : { "min" : 249000.0, "max" : 405000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "certifications" : [ "GCIH", "GCIA", "GCFA", "OSCP" ], "timestamp" : "2026-06-15T10:00:53.254", "fingerprint" : "37d1e00e33ba49612098b223ca87013c404818923d4c9b029cea66052e43f046", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/ivo-inc/261e580a-d201-43b0-a8bf-2a30e7884659/application", "externalId" : "261e580a-d201-43b0-a8bf-2a30e7884659", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GCP, Azure, Cloudflare, Okta, SSO, SAML, SCIM, MFA, RBAC, Kandji, Python", "professionalSkills" : [ "Detection engineering", "Incident response", "Cloud security", "Identity security", "Network security", "Vulnerability management", "Security automation", "Threat hunting", "Compliance", "Risk prioritization", "Access management" ], "hardSkillsList" : [ "SIEM tuning", "Telemetry analysis", "Infrastructure hardening", "Network hardening", "Access provisioning", "Access deprovisioning", "Least-privilege enforcement", "Endpoint security", "Email security", "Security automation scripting", "Threat modeling" ], "hardSkills" : [ { "name" : "SIEM tuning", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Infrastructure hardening", "level" : "intermediate" }, { "name" : "Network hardening", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Access deprovisioning", "level" : "intermediate" }, { "name" : "Least-privilege enforcement", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Email security", "level" : "intermediate" }, { "name" : "Security automation scripting", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" } ], "majorSkills" : "Detection engineering, Incident response, Cloud security", "majorSkillsList" : [ "Detection engineering", "Incident response", "Cloud security" ], "coreResponsibilities" : "Own detection and response, Build and tune detections, Turn telemetry into alerts, Lead incident response, Run investigations end to end, Drive containment and recovery, Write post-incident review, Own cloud security posture, Find misconfigurations, Prioritize real risk, Partner with engineering, Own perimeter and network security, Manage Cloudflare WAF rules, Manage DNS security, Manage edge controls, Harden network config, Harden infrastructure config, Run vulnerability management, Triage vulnerabilities, Prioritize vulnerabilities, Drive remediation to closure, Operate identity and access, Harden identity and access, Own provisioning hygiene, Own deprovisioning hygiene, Own access reviews, Enforce least-privilege, Manage endpoint security, Manage device security, Manage email security, Keep fleet hardened, Keep fleet monitored, Build security automation, Remove toil with automation, Script repetitive work, Wire up SOAR response, Make secure path easy, Run proactive threat hunting, Develop detection coverage, Produce operational evidence, Maintain operational evidence, Support compliance programs, Support enterprise security reviews, Contribute security operations input, Support customer reviews, Ship paved roads", "teamCollaboration" : "Partner with engineering; Work alongside engineering; Work alongside IT", "domainKnowledge" : "SaaS security; Cloud-native security; Identity and access management; Network security; Endpoint security; Vulnerability management; Incident response; Detection engineering; SOC 2 Type II; ISO 27001; ISO 42001; AI/LLM security", "domainList" : [ "saas-security", "cloud-native-security", "identity-and-access-management", "network-security", "endpoint-security", "vulnerability-management", "incident-response", "detection-engineering", "soc-2-type-ii", "iso-27001", "iso-42001", "ai-llm-security" ], "domainSpecificKnowledge" : [ "SaaS security", "Cloud-native security", "Identity and access management", "Network security", "Endpoint security", "Vulnerability management", "Incident response", "Detection engineering", "SOC 2 Type II", "ISO 27001", "ISO 42001", "AI/LLM security" ], "toolProficiency" : [ "Panther", "Cloudflare WAF", "Okta", "Kandji", "GCP", "Azure" ], "communicationSkills" : "Written communication; Runbook writing; Detection writeup; Post-incident review; Customer-facing documentation", "documentationSkills" : "Runbooks; Detection writeups; Post-incident reviews; Trust documentation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "outcomesObjectives" : "Detect threats; Respond to threats; Defend against threats; Close misconfigurations; Drive remediation to closure; Reduce toil with automation", "qualificationsBasic" : "5+ years in security operations, 5+ years detection engineering, 5+ years incident response, 5+ years infrastructure security, 5+ years cloud security, Time owning detection, Time owning IR, Hands-on detection engineering, Hands-on detection tuning, Hands-on detection pipelines, Hands-on SIEM work, Cloud security background, Hands-on perimeter security, Hands-on network security, Deep identity access experience, Real incident response experience, Led investigations end to end, Comfortable scripting and automating, Track record running vulnerability management, Excellent written communication", "qualificationsPreferred" : "Detection-as-code experience, Experience securing AI infrastructure, Experience securing LLM infrastructure, Series or earlier experience, Built or scaled security operations, SOAR platform experience, Security automation platform experience, Background supporting enterprise customers", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "WHY IVO? Every civilization runs on the same infrastructure: agreements between people who don't fully trust each other. Sumerians pressed them into clay. Romans carved them into stone. We bury them in 80-page PDFs. The way those agreements are reviewed hasn't changed in four thousand years - a human reads the whole thing and tries not to miss anything. We're building the AI that finally changes that. Ivo is the contract intelligence platform of choice for companies like Uber, Meta, Canva, IBM, and Shopify. We recently raised our Series B and have grown 800% over the last 12 months. THE ROLE: We're hiring a Senior Security Engineer to own how Ivo detects, responds to, and defends against threats across our infrastructure, identity, network, and endpoints. You'll partner directly with our Head of IT & Security and work alongside engineering and IT to keep the systems behind our product safe. This is a hands-on senior IC role with broad scope: detection engineering, incident response, cloud and identity security operations, perimeter and network hardening, vulnerability management, and security automation. Where our Application Security Engineer owns the product itself, you own everything around it: the systems, the signals, and the response. Our platform handles legally privileged documents for some of the largest companies in the world. The security stakes are real, and so is the impact. RESPONSIBILITIES • Own detection and response across Ivo's cloud, identity, and endpoint estate. - Build and tune detections in our SIEM (Panther). Turn noisy telemetry into high-signal alerts engineers and IT actually act on, with a strong bias toward signal over noise. - Lead incident response for infrastructure, identity, and corporate-layer security events. Run investigations end to end, drive containment and recovery, and write the post-incident review. - Own cloud security posture across GCP and Azure. Find misconfigurations, prioritize real risk, and partner with engineering to close it. - Own perimeter and network security. Manage Cloudflare WAF rules, DNS security, and edge controls, and harden our network and infrastructure config against real-world attack patterns. - Run vulnerability management for our infrastructure and assets. Triage, prioritize, and drive remediation to closure rather than just forwarding scanner output. - Operate and harden identity and access (Okta, SSO, SAML, SCIM, MFA, RBAC). Own provisioning and deprovisioning hygiene, access reviews, and least-privilege enforcement. - Manage endpoint and device security (Kandji for MDM) and email security (Material). Keep the fleet hardened and monitored. - Build security automation that removes toil. Script away repetitive work, wire up SOAR-style response, and make the secure path the easy path. - Run proactive threat hunting across logs and telemetry, and develop detection coverage against the threats that actually target a company like ours. - Produce and maintain operational evidence for SOC 2 Type II, ISO 27001, and ISO 42001, and support our compliance and enterprise security review programs. - Contribute security operations input to enterprise security reviews and customer-facing trust documentation. - Partner with engineering and IT rather than blocking them. You ship paved roads, not tickets. WHO YOU ARE: - 5+ years in security operations, detection and response, or infrastructure and cloud security at a SaaS company, including time owning detection or IR for a production environment. - Hands-on detection engineering. You write and tune detections, build pipelines, and work in a SIEM directly. You don't just watch dashboards. - Strong cloud security background in GCP and/or Azure: identity, network, workload, and posture management. - Hands-on with perimeter and network security: WAF/CDN (Cloudflare or similar), DNS security, and edge controls. - Deep identity and access experience: Okta or similar IdP, SSO, SAML, SCIM, MFA, and RBAC in practice. - Real incident response experience. You've led investigations end to end, from first alert to post-incident review. - Comfortable scripting and automating (Python or similar). You can read code and build your own tooling, not just buy it. - Track record of running vulnerability management as a program, not a queue. - Excellent written communication. You can write a runbook engineers follow, a detection writeup that's genuinely useful, and a post-incident review leadership trusts. - A strong internal sense of urgency and a bias toward shipping and automating today rather than tomorrow. NICE TO HAVE: - Detection-as-code experience (Panther, Sigma, or similar) and treating detections like software. - Experience securing AI / LLM infrastructure and the operational risks around agents and model access. - Series B or earlier experience where you built or scaled a security operations function from limited scaffolding. - GCIH, GCIA, GCFA, OSCP, or comparable hands-on credentials. - Experience with SOAR or security automation platforms. - Background supporting enterprise customers in regulated industries. WHY THIS ROLE MATTERS: Ivo's customers entrust us with their most sensitive contracts. As we move further upmarket and into more regulated industries, our ability to detect and respond to threats fast is becoming a direct driver of enterprise revenue and a key part of the trust we earn at the deal table. This role owns the operational security of the company itself. The person who fills it will define what good detection and response looks like at Ivo for years to come. FAQ - How far along are we? We launched in early access in 2023. Since then, we’ve had an incredible response from the market and are growing rapidly. We 6x'd in ARR in the last 12 months. Our clients include companies like Uber, Reddit, IBM, Canva, Pinterest, WordPress, and more. We're happy to share more details with candidates who go through our interview process. - Can I work remotely? We have an in-office culture, with some hybrid flexibility. - Compensation: The USD salary range for this role is $249K - $405K. Final offer amounts are determined by multiple factors, including, experience and expertise, and may vary from the amounts listed above.", "summaryDescription" : "Senior Security Engineer at Ivo. Skills: Detection engineering, Incident response, Cloud security. Own detection and response. Build and tune detections", "createdAt" : "2026-06-14T09:48:20.608", "lastUpdated" : "2026-06-15T10:00:53.254", "ingestTimestamp" : "2026-06-14T09:48:20.608", "mongoId" : "6a2caf9c74d8ee00a09d75bb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 249000, "salaryAnnualMax" : 405000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "SIEM tuning", "Telemetry analysis", "Infrastructure hardening", "Network hardening", "Access provisioning", "Access deprovisioning", "Least-privilege enforcement", "Endpoint security", "Email security", "Security automation scripting", "Threat modeling", "Detection engineering", "Incident response", "Cloud security", "Identity security", "Network security", "Vulnerability management", "Security automation", "Threat hunting", "Compliance", "Risk prioritization", "Access management", "SaaS security", "Cloud-native security", "Identity and access management", "SOC 2 Type II", "ISO 27001", "ISO 42001", "AI/LLM security", "GCIH", "GCIA", "GCFA", "OSCP", "Panther", "Cloudflare WAF", "Okta", "Kandji", "GCP", "Azure" ], "skillCount" : 39, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1118.609, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "69e104432beec4dd3def2925", "title" : "Security Engineer II", "company" : "Amazon.com Services LLC", "industry" : "Corporate Operations, Systems Security Engineering, no business category", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Dallas, Texas, USA", "locations" : [ "Dallas, Texas, USA" ], "timestamp" : "2026-06-15T02:51:34.190", "fingerprint" : "6d433cdece902c81fecdf4134cdbada22194598256a61bddd841de60799b98a1", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10381551/apply", "externalId" : "1b3eb1db-8200-465f-ae9f-71bdafb3383b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 1, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Java, C, C++, Perl, Ruby", "professionalSkills" : [ "Information security", "Security policy compliance", "Data confidentiality", "Application security reviews", "Threat modeling" ], "hardSkillsList" : [ "Penetration testing", "Network configuration", "Service configuration", "Vulnerability remediation", "Source code review" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Network configuration", "level" : "intermediate" }, { "name" : "Service configuration", "level" : "intermediate" }, { "name" : "Vulnerability remediation", "level" : "intermediate" }, { "name" : "Source code review", "level" : "intermediate" } ], "majorSkills" : "Information security, Application security, Threat response", "majorSkillsList" : [ "Information security", "Application security", "Threat response" ], "coreResponsibilities" : "Provide frontline support, Advise on security policy compliance, Handle data confidentiality issues, Monitor emerging threats, Respond to emerging threats, Contribute to policy development, Contribute to process development, Conduct application security reviews, Recommend solutions for security issues, Provide information security support during events, Identify recurring issues, Troubleshoot recurring issues, Escalate issues for resolution", "domainKnowledge" : "System security vulnerabilities; Remediation techniques", "domainList" : [ "system-security-vulnerabilities", "remediation-techniques" ], "domainSpecificKnowledge" : [ "System security vulnerabilities", "Remediation techniques" ], "toolProficiency" : [ "Vulnerability testing tools" ], "problemSolvingSkills" : "Troubleshoot recurring issues", "qualificationsBasic" : "Bachelor's degree or foreign equivalent, One year of experience, Application and infrastructure information, Application of threat modeling, Knowledge of system security vulnerabilities, Programming in Java, C, C++, Perl, Ruby, Coordinating technical security tasks", "qualificationsPreferred" : "See job description, See position requirements", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "MULTIPLE POSITIONS AVAILABLE Employer: AMAZON.COM SERVICES LLC Offered Position: Security Engineer II Job Location: Dallas, Texas Job Number: AMZ9675478 Position Responsibilities: Provide frontline support for all information security related issues, such as penetration testing, network and service configuration, advising on security policy compliance, handling data confidentiality issues, and monitoring and responding to emerging threats. Contribute to the development of Information Security policies and process. Conduct application security reviews and recommend solutions to resolve application security issues. Provide information security support during events impacting tier one customer-facing services. Identify and troubleshoot recurring issues and escalate appropriately for full resolution. 40 hours / week, 8:00am-5:00pm, Salary Range $159,300/year to $202,400/year. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, visit: https://www.aboutamazon.com/workplace/employee-benefits. Amazon.com is an Equal Opportunity-Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation.#0000 Basic Qualifications: Position Requirements: Bachelor’s degree or foreign equivalent degree in Computer Science, Engineering, Information Systems or Technology, Mathematics or a related field and one year of experience in the job offered or a related occupation. Must have one year of experience in the following skill(s): (1) application and infrastructure information security; (2) application of threat modeling or other risk identification techniques; (3) knowledge of system security vulnerabilities and remediation techniques, including penetration testing, source code review, configuring advanced runtime and static vulnerability testing tools and the development of exploits; (4) programming in Java, C, C++, Perl, Ruby or Python; and (5) coordinating responsibility of technical security tasks.#0000 Preferred Qualifications: Please see job description and the position requirements above. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer II at Amazon.com Services LLC. Skills: Information security, Application security, Threat response. Provide frontline support. Advise on security policy compliance", "postedDate" : "2026-06-13T09:41:46.462", "createdAt" : "2026-06-13T09:41:46.462", "lastUpdated" : "2026-06-15T02:51:34.190", "ingestTimestamp" : "2026-06-13T09:41:46.462", "mongoId" : "69e104432beec4dd3def2925", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10381551/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Penetration testing", "Network configuration", "Service configuration", "Vulnerability remediation", "Source code review", "Information security", "Application security", "Threat response", "Security policy compliance", "Data confidentiality", "Application security reviews", "Threat modeling", "System security vulnerabilities", "Remediation techniques", "Vulnerability testing tools" ], "skillCount" : 15, "jobCategory" : "operations", "dataQualityScore" : 1.0, "_score" : 1116.1615, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a3057f5f292fd229cf3f231", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:14:43.050", "fingerprint" : "bb3bf1fd4e7d55411eb83fbc341b38e2ce2335d962e33ef3f3feb348a180b316", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring use cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage service provider relationships, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Protect against threats, Resolve threats, Participate in selection of security solutions, Evaluate security solutions, Improve enterprise security, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud computing; Threat Intelligence Management; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud-computing", "threat-intelligence-management", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T23:44:55.017", "lastUpdated" : "2026-06-16T08:14:43.050", "ingestTimestamp" : "2026-06-15T23:44:55.017", "mongoId" : "6a3057f5f292fd229cf3f231", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Cyber Security Operations", "Incident Response", "SIEM tuning", "Cyber Security", "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1115.0979, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305299f292fd229cf0ec61", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:29:37.048", "fingerprint" : "50545fa5c12fe38cf8ac3a90e9d739c9b1a419db521bdc38142890221e997e19", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" }, { "name" : "Security solution evaluation", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM Tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM Tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring Use Cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage relationship to service providers, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Provide implementations for incidents, Provide recommendations for incidents, Participate in selection of security solutions, Participate in evaluation of security solutions, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM Tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T21:55:54.859", "lastUpdated" : "2026-06-16T08:29:37.048", "ingestTimestamp" : "2026-06-15T21:55:54.859", "mongoId" : "6a305299f292fd229cf0ec61", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation", "Cyber Security Operations", "Incident Response", "SIEM Tuning", "Cyber Security", "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1115.0979, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305119f292fd229cefa150", "title" : "Security Analyst (Cyber Defense Analyst)", "industry" : "IT", "salary" : { "min" : 1750000.0, "max" : 2750000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Analyst in India, adjusted for seniority and industry." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "GCIH", "CySA+", "GSEC", "SSCP", "CCSP" ], "timestamp" : "2026-06-16T11:24:45.864", "fingerprint" : "79d0850a6e7105df6d7a472da8558864f5a1306c8e56ca957ae1be846f7f2629", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/63fc29fe-8221-46d6-ba45-613929eed7ce/apply", "externalId" : "63fc29fe-8221-46d6-ba45-613929eed7ce", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, Microsoft Defender XDR, Microsoft 365, AWS, Azure, Windows, MacOS, PowerShell, Python", "professionalSkills" : [ "Threat hunting", "Detection engineering", "Vulnerability remediation", "Risk reduction" ], "hardSkillsList" : [ "Incident response", "Security analysis", "Threat analysis", "Security monitoring", "Data correlation" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security analysis", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Data correlation", "level" : "intermediate" } ], "majorSkills" : "Cyber defense, Incident response, Security analysis", "majorSkillsList" : [ "Cyber defense", "Incident response", "Security analysis" ], "coreResponsibilities" : "Monitor security alerts, Triage security alerts, Analyze security alerts, Investigate security incidents, Determine incident scope, Determine incident impact, Correlate security events, Validate threats, Support escalation decisions, Contribute to incident response, Document investigations, Document findings, Document response activities, Conduct threat hunting, Identify attack patterns, Identify adversary techniques, Identify detection gaps, Support detection engineering, Support automation initiatives, Assist refining incident response, Assist refining playbooks, Assist refining procedures, Collaborate with owners, Prioritize vulnerability remediation, Track risk reduction", "teamCollaboration" : "Cross-team development", "domainKnowledge" : "Cybersecurity; Cyber defense; Incident response; SIEM platforms; Enterprise security; Endpoint security; Identity systems; Cloud environments; Network security; Application security; Threat frameworks; MITRE ATT&CK; NIST CSF; CIS Controls; Vulnerability management; Networking fundamentals; AWS; Azure; Windows OS; macOS; Microsoft 365 ecosystem", "domainList" : [ "cybersecurity", "cyber-defense", "incident-response", "siem-platforms", "enterprise-security", "endpoint-security", "identity-systems", "cloud-environments", "network-security", "application-security", "threat-frameworks", "mitre-att-ck", "nist-csf", "cis-controls", "vulnerability-management", "networking-fundamentals", "aws", "azure", "windows-os", "macos", "microsoft-365-ecosystem" ], "domainSpecificKnowledge" : [ "Cybersecurity", "Cyber defense", "Incident response", "SIEM platforms", "Enterprise security", "Endpoint security", "Identity systems", "Cloud environments", "Network security", "Application security", "Threat frameworks", "MITRE ATT&CK", "NIST CSF", "CIS Controls", "Vulnerability management", "Networking fundamentals", "AWS", "Azure", "Windows OS", "macOS", "Microsoft 365 ecosystem" ], "toolProficiency" : [ "CrowdStrike NG-SIEM", "Microsoft Defender XDR", "Tenable", "Wiz" ], "communicationSkills" : "Technical findings communication", "documentationSkills" : "Incident reports", "continuousLearning" : "Certification support", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5+ years cybersecurity experience, Hands-on SIEM tools experience, Microsoft Defender XDR experience, Microsoft 365 security experience, Networking fundamentals understanding, Cloud environments understanding, Operating systems understanding, MITRE ATT&CK familiarity, NIST CSF familiarity, CIS Controls familiarity, Write clear incident reports, Communicate technical findings, Scripting or query languages exposure, Bachelor's degree", "qualificationsPreferred" : "CrowdStrike NG-SIEM experience, Vulnerability management tools experience, Tenable experience, Wiz experience, GCIH certification preferred, CySA+ certification preferred, GSEC certification preferred, SSCP certification preferred, CCSP certification preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Monitor, triage, and analyze security alerts and telemetry across SIEM and enterprise security platforms to identify potential threats and anomalies. Investigate security incidents across endpoints, identity systems, cloud environments, networks, and applications to determine scope and impact. Correlate security events to validate threats, support escalation decisions, and contribute to timely incident response actions. Document investigations, findings, and response activities while maintaining clear communication with stakeholders and leadership. Conduct proactive threat hunting activities to identify emerging attack patterns, adversary techniques, and detection gaps. Support detection engineering and automation initiatives to improve monitoring coverage and response efficiency. Assist in refining incident response processes, playbooks, and operational procedures to enhance cyber defense maturity. Collaborate with infrastructure and system owners to prioritize vulnerability remediation and track risk reduction efforts. Requirements: 5+ years of experience in cybersecurity, SOC, cyber defense, or incident response roles within enterprise environments. Hands-on experience with SIEM tools (searches, dashboards, alerts, investigations), preferably CrowdStrike NG-SIEM. Experience with Microsoft Defender XDR and Microsoft 365 security ecosystem (identity, email, and collaboration security). Strong understanding of networking fundamentals, cloud environments (AWS/Azure), and operating systems (Windows and macOS). Familiarity with threat frameworks such as MITRE ATT&CK, NIST CSF, or CIS Controls. Ability to write clear incident reports and communicate technical findings to both technical and non-technical stakeholders. Exposure to scripting or query languages such as PowerShell, Python, or similar for analysis and automation. Experience with vulnerability management tools such as Tenable or Wiz is preferred. Relevant certifications such as GCIH, CySA+, GSEC, SSCP, or CCSP are strongly preferred. Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field. Benefits: Competitive compensation with comprehensive benefits package. Health insurance coverage with options for dependents. Paid time off, company holidays, and additional leave benefits. Flexible work arrangements supporting work-life balance. Continuous learning and certification support to accelerate career growth. Employee wellness programs focused on physical and mental well-being. Strong engineering-driven culture with access to advanced security tools and lab environments. Inclusive, collaborative workplace with opportunities for cross-team development and ownership. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Security Analyst (Cyber Defense Analyst). Skills: Cyber defense, Incident response, Security analysis. Monitor security alerts. Triage security alerts", "postedDate" : "2026-06-15T12:04:42.126", "createdAt" : "2026-06-15T12:04:42.126", "lastUpdated" : "2026-06-16T11:24:45.864", "ingestTimestamp" : "2026-06-16T03:23:21.500", "mongoId" : "6a305119f292fd229cefa150", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Security analysis", "Threat analysis", "Security monitoring", "Data correlation", "Cyber defense", "Threat hunting", "Detection engineering", "Vulnerability remediation", "Risk reduction", "Cybersecurity", "SIEM platforms", "Enterprise security", "Endpoint security", "Identity systems", "Cloud environments", "Network security", "Application security", "Threat frameworks", "MITRE ATT&CK", "NIST CSF", "CIS Controls", "Vulnerability management", "Networking fundamentals", "AWS", "Azure", "Windows OS", "macOS", "Microsoft 365 ecosystem", "GCIH", "CySA+", "GSEC", "SSCP", "CCSP", "CrowdStrike NG-SIEM", "Microsoft Defender XDR", "Tenable", "Wiz" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1112.6082, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "69d140072beec4dd3ddbe417", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:05:22.074", "fingerprint" : "e2894a4e26f433c9bfa4feb2c29c9e1333a0d467b9baa905cfe0e71496e2c170", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10383075/apply", "externalId" : "6879b3a1-ef52-4a67-b131-e0bccf3540b2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvement opportunities, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network", "domainList" : [ "aws-security", "corporate-network" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Respond to threats; Respond to vulnerabilities", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity; Deliver efficiency gains; Deliver productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T13:03:49.850", "createdAt" : "2026-06-13T13:03:49.850", "lastUpdated" : "2026-06-15T06:05:22.074", "ingestTimestamp" : "2026-06-13T13:03:49.850", "mongoId" : "69d140072beec4dd3ddbe417", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10383075/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1110.1521, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a191e7758b93c861e39f6d9", "title" : "Security Operation", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Operation role in Beijing, China, adjusted for the technology industry and a large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP", "CISM" ], "timestamp" : "2026-06-16T06:35:48.202", "fingerprint" : "0f6917ea953a3e131579c32b1270584e12d4a83b21426a992e4f929c5c0f6ad5", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873155", "externalId" : "873155", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9057136,116.3912972" } ], "locationText" : "Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, SOAR, Firewalls, Intrusion detection, Vulnerability scanners, Python, PowerShell, AWS, Azure, Ali Cloud", "professionalSkills" : [ "Risk assessment", "Incident response", "Vulnerability management", "Log analysis", "Forensic investigations", "Threat analysis" ], "hardSkillsList" : [ "Security operations", "Incident response", "Vulnerability management", "Threat detection", "Forensic investigation" ], "softSkillsList" : [ "Adaptability" ], "hardSkills" : [ { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Adaptability" } ], "majorSkills" : "Security operations, Incident response, Vulnerability management", "majorSkillsList" : [ "Security operations", "Incident response", "Vulnerability management" ], "coreResponsibilities" : "Safeguard information assets, Manage security risks, Respond to incidents, Improve security posture, Protect information assets, Identify security risks, Assess security risks, Mitigate security risks, Lead incident response, Coordinate incident response, Monitor security incidents, Respond to security incidents, Contain security threats, Eradicate security threats, Recover from security threats, Investigate security incidents, Analyze logs, Conduct forensic investigations, Develop incident reports, Identify gaps, Recommend improvements, Coordinate response activities, Conduct vulnerability assessments, Manage remediation efforts, Identify vulnerabilities, Assess vulnerabilities, Report vulnerabilities, Remediate vulnerabilities, Fine-tune detection rules, Minimize false positives, Improve detection accuracy, Analyze security measures, Update policies, Update configurations, Update procedures, Track emerging threats, Track attack patterns, Track tactics, Track techniques, Track procedures, Develop documentation, Maintain documentation, Develop playbooks, Maintain playbooks, Develop procedures, Maintain procedures, Onboard new team members, Facilitate team integration, Develop planning processes, Develop collaboration processes, Provide technical support, Provide administrative support, Integrate security into SDLC, Provide security training, Provide security awareness, Communicate security status, Communicate security risks, Communicate security incidents", "teamCollaboration" : "IT teams; RD application teams; Business stakeholders; Executive leadership", "domainKnowledge" : "Security operations; Incident response; Vulnerability management; Cloud platforms; ISO 27001; SOC; NIST", "domainList" : [ "security-operations", "incident-response", "vulnerability-management", "cloud-platforms", "iso-27001", "soc", "nist" ], "domainSpecificKnowledge" : [ "Security operations", "Incident response", "Vulnerability management", "Cloud platforms", "ISO 27001", "SOC", "NIST" ], "toolProficiency" : [ "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "communicationSkills" : "Written communication; Verbal communication; Technical audiences; Executive audiences", "documentationSkills" : "Documentation; Playbooks; Standard operating procedures", "problemSolvingSkills" : "Analytical skills; Troubleshooting skills; Issue resolution", "outcomesObjectives" : "Minimize impact; Ensure timely recovery; Minimize false positives; Improve detection accuracy", "qualificationsBasic" : "5+ years experience in security operations, Bachelor's degree in Computer Science", "qualificationsPreferred" : "CISA certification, CISSP certification, CISM certification", "remoteFriendly" : false, "rawDescription" : "Objective of job To safeguard the organization's information assets by proactively managing security risks, effectively responding to incidents, and continuously improving the overall security posture. -Protect the organization's information assets by maintaining confidentiality, integrity, and availability. -Proactively identify, assess, and mitigate security risks and vulnerabilities. -Lead and coordinate effective responses to security incidents, minimizing impact and ensuring timely recovery. -Continuously improve the organization's security posture through proactive monitoring, analysis, and implementation of security best practices. -Ensure compliance with relevant security standards, regulations, and policies. Job designation •Security Incident Management -Monitor and respond to security incidents in alignment with incident response protocols. -Lead incident response efforts to ensure timely containment, eradication, and recovery from security threats. -Conduct thorough investigations of security incidents, including log analysis, host-based and network forensic investigations, to determine the root cause and impact. -Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement. -Coordinate investigation, containment, and other response activities with business stakeholders and groups. •Vulnerability Management -Conduct vulnerability assessments and manage remediation efforts. -Continually identify, assess, report on, manage, and remediate vulnerabilities across endpoints, workloads, and systems. •Security Operations -Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy. -Analyze and improve security measures by assessing and updating policies, configurations, and procedures. -Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures -Develop and maintain documentation, playbooks, and standard operating procedures. -Perform onboarding of new team members and facilitate smooth integration. -Help develop processes used for internal and external planning and collaboration. -Provide technical and administrative support for day-to-day operations. •Collaboration and Communication -Collaborate with IT and RD application teams to ensure security is integrated into all stages of the software development lifecycle. -Provide security training and awareness programs for employees. -Communicate security status, risks, and incidents to executive leadership and other key stakeholders. Qualification •Technical Skills and Knowledge: -Strong understanding of security operations concepts, incident response methodologies, and vulnerability management principles. Hands-on experience administering and configuring security tools such as SIEM, SOAR, firewalls, intrusion detection/prevention systems, and vulnerability scanners. -Familiarity with scripting languages (e.g., Python, PowerShell) for task automation and tool customization. -Knowledge of cloud platforms such as AWS, Azure, Ali Cloud or other cloud platform. -Strong analytical and troubleshooting skills for rapid issue resolution under pressure. -Excellent communication skills, both written and verbal, for technical and executive audiences. -Adaptability and resilience in the face of evolving cyber threats. •Proficiency in security frameworks and various compliance standards like ISO 27001, SOC, NIST, etc. •Relevant certifications, CISA, CISSP, CISM •> 5 years experience in security operations, incident response, threat detection and analysis, or similar roles •Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Security Operation at Mercedes-Benz Group China Ltd.. Skills: Security operations, Incident response, Vulnerability management. Safeguard information assets. Manage security risks", "createdAt" : "2026-06-14T21:18:50.139", "lastUpdated" : "2026-06-16T06:35:48.202", "ingestTimestamp" : "2026-06-14T21:18:50.139", "mongoId" : "6a191e7758b93c861e39f6d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security operations", "Incident response", "Vulnerability management", "Threat detection", "Forensic investigation", "Adaptability", "Risk assessment", "Log analysis", "Forensic investigations", "Threat analysis", "Cloud platforms", "ISO 27001", "SOC", "NIST", "CISA", "CISSP", "CISM", "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1103.6725, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c93eb74d8ee00a0989433", "title" : "Senior Security Operations & Vulnerability Management Engineer", "company" : "SolarWinds", "industry" : "Cybersecurity", "salary" : { "min" : 235000.0, "max" : 330000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Operations & Vulnerability Management Engineer in Kraków, Poland, adjusted for the technology industry and company size." }, "location" : "Brno Office", "locations" : [ "Brno Office" ], "certifications" : [ "CISSP", "CISM", "GIAC" ], "timestamp" : "2026-06-16T02:19:05.537", "fingerprint" : "db019e26dd9c8fedb952ad0e775bb0f1c68f9bc6f33201a4166130823d9e8f27", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.solarwinds.com/job-detail/?gh_jid=4704242005&gh_jid=4704242005", "externalId" : "4704242005", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kraków", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0469432,19.9971534" } ], "locationText" : "Kraków, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, Vulnerability scanning, Incident response, Cloud security, Python, PowerShell, Network security, Endpoint security, Threat intelligence, Security automation", "professionalSkills" : [ "Risk assessment", "Security architecture", "Forensic analysis" ], "hardSkillsList" : [ "Security operations", "Vulnerability management", "Incident handling", "Threat detection", "Security monitoring", "Penetration testing", "Digital forensics" ], "hardSkills" : [ { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" } ], "majorSkills" : "Security operations, Vulnerability management, Incident response", "majorSkillsList" : [ "Security operations", "Vulnerability management", "Incident response" ], "coreResponsibilities" : "Monitor security alerts, Investigate security incidents, Perform vulnerability assessments, Manage vulnerability remediation efforts, Develop and maintain security playbooks, Automate security processes, Conduct threat hunting activities, Analyze security logs, Respond to security breaches, Provide security recommendations", "teamCollaboration" : "Cross-functional teams; Security engineering teams; IT operations teams", "domainKnowledge" : "Cyber threat landscape; Network protocols; Operating systems security; Cloud computing security; OWASP Top 10", "domainList" : [ "cyber-threat-landscape", "network-protocols", "operating-systems-security", "cloud-computing-security", "owasp-top-10" ], "domainSpecificKnowledge" : [ "Cyber threat landscape", "Network protocols", "Operating systems security", "Cloud computing security", "OWASP Top 10" ], "toolProficiency" : [ "SIEM tools", "Vulnerability scanning tools", "Firewalls" ], "communicationSkills" : "Incident reporting; Technical documentation", "documentationSkills" : "Security policies; Procedures; Incident reports", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Forensic analysis", "outcomesObjectives" : "Reduce security incidents; Minimize vulnerability exposure; Improve security posture; Ensure compliance with security standards", "qualificationsBasic" : "5+ years of experience in security operations, 3+ years of experience in vulnerability management, Bachelor's degree in Computer Science or related field, Experience with SIEM tools, Experience with vulnerability scanning tools, Experience with incident response", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with cloud security, Experience with scripting languages (Python, PowerShell), Relevant security certifications (CISSP, CISM, GIAC)", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure solutions. The ideal candidate thrives in an innovative, fast-paced environment and is collaborative, accountable, ready, and empathetic. We’re looking for individuals who believe they can accomplish more as a team and create lasting growth for themselves and others. We hire based on attitude, competency, and commitment. Solarians are ready to advance our world-class solutions in a fast-paced environment and accept the challenge to lead with purpose. If you’re looking to build your career with an exceptional team, you’ve come to the right place. Join SolarWinds and grow with us! We work in hybrid mode 3+2, at least 3 days at the office (with mandatory Wednesdays and Thursdays) and 2 days at the home office. The location of our office is Puszkarska 7J/Building E, 30-644 Kraków, Polska. We employ only via an employment contract – FTE. Role Overview We are looking for a Senior Engineer who views Vulnerability Management as a risk-reduction craft, not a compliance checkbox. While you will be involved in high-level security operations, your primary focus is to evolve our Threat you know how to apply them to prioritize your week. The \"Attacker Mindset\": You understand exploit development and penetration testing methodologies. You know which vulnerabilities are \"low hanging fruit\" for an attacker, even if the scanner says they’re \"Medium.\" Certifications & Education While we value experience over paper, professional certifications like CISSP, GCIH, or GEVA (GIAC Enterprise Vulnerability Assessor) are highly regarded. Specialized cloud certs (CCSP, AWS Security) or a degree in Cybersecurity/CS are a plus, but your ability to solve complex problems is what we’re really looking for. Why you’ll love this role You won't be a cog in a machine. You’ll have the autonomy to rebuild our TVM processes and a seat at the table to influence how the entire organization approaches security risk. Our benefits: 10 study days per year 2 volunteering days per year 30-day holidays after 5-year tenure, Sabbatical Leave 4 weeks of paternity leave Up to 8700 PLN personal education budget per year 300 PLN corrective glasses reimbursement every two years Medical care with Luxmed – individual, partner, or family package fully paid by the company The company fully pays for group life insurance Pension scheme (employee capital plans) with 1.5% employer contribution Unlimited access to LinkedIn Learning English/Polish classes MyBenefit platform with a monthly subsidy of 103 PLN (with various vouchers and Multisport cards available) 500 PLN per year of race fee reimbursement Solarian Referral Program SolarWinds Appreciation Program Employee Assistance Program Free lunches at the office on Wednesdays SolarWinds is an Equal Employment Opportunity Employer. SolarWinds will consider all qualified applicants for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, marital status, disability, veteran status or any other characteristic protected by law. All applications are treated in accordance with the SolarWinds Privacy Notice: https://www.solarwinds.com/applicant-privacy-notice", "summaryDescription" : "Senior Security Operations & Vulnerability Management Engineer at SolarWinds. Skills: Security operations, Vulnerability management, Incident response. Monitor security alerts. Investigate security incidents", "postedDate" : "2026-06-14T20:06:17.740", "createdAt" : "2026-06-14T20:06:17.740", "lastUpdated" : "2026-06-16T02:19:05.537", "ingestTimestamp" : "2026-06-14T20:06:17.740", "mongoId" : "6a2c93eb74d8ee00a0989433", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security operations", "Vulnerability management", "Incident handling", "Threat detection", "Security monitoring", "Penetration testing", "Digital forensics", "Incident response", "Risk assessment", "Security architecture", "Forensic analysis", "Cyber threat landscape", "Network protocols", "Operating systems security", "Cloud computing security", "OWASP Top 10", "CISSP", "CISM", "GIAC", "SIEM tools", "Vulnerability scanning tools", "Firewalls" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1102.1245, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "69cf73592beec4dd3d9c848a", "title" : "Security Operation", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 350000.0, "max" : 600000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Operation role in Beijing, China, adjusted for the technology industry and a large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP", "CISM" ], "timestamp" : "2026-06-16T01:03:53.353", "fingerprint" : "12e7c692808b606638a409de22e204ced74c36d329570ca4dc447417c29bfe36", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873155", "externalId" : "873155", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9057136,116.3912972" } ], "locationText" : "Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, SOAR, Firewalls, Intrusion detection, Vulnerability scanners, Python, PowerShell, AWS, Azure, Ali Cloud", "professionalSkills" : [ "Security operations", "Incident response", "Vulnerability management", "Risk assessment", "Troubleshooting" ], "hardSkillsList" : [ "Log analysis", "Forensic investigations" ], "softSkillsList" : [ "Adaptability" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensic investigations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Adaptability" } ], "majorSkills" : "Security operations, Incident response, Vulnerability management", "majorSkillsList" : [ "Security operations", "Incident response", "Vulnerability management" ], "coreResponsibilities" : "Safeguard information assets, Manage security risks, Respond to incidents, Improve security posture, Protect information assets, Identify security risks, Assess security risks, Mitigate security risks, Lead incident response, Coordinate incident response, Monitor security incidents, Respond to security incidents, Contain security threats, Eradicate security threats, Recover from security threats, Investigate security incidents, Analyze logs, Conduct forensic investigations, Develop incident reports, Identify gaps, Recommend improvements, Coordinate response activities, Conduct vulnerability assessments, Manage remediation efforts, Identify vulnerabilities, Assess vulnerabilities, Report vulnerabilities, Remediate vulnerabilities, Fine-tune detection rules, Improve detection accuracy, Analyze security measures, Update policies, Update configurations, Update procedures, Track emerging threats, Track attack patterns, Track tactics, Track techniques, Track procedures, Develop documentation, Maintain documentation, Develop playbooks, Maintain playbooks, Develop procedures, Maintain procedures, Onboard new team members, Facilitate team integration, Develop planning processes, Develop collaboration processes, Provide technical support, Provide administrative support, Integrate security into SDLC, Provide security training, Provide awareness programs, Communicate security status, Communicate security risks, Communicate security incidents", "teamCollaboration" : "IT teams; RD application teams; Business stakeholders; Executive leadership", "domainKnowledge" : "Security operations concepts; Incident response methodologies; Vulnerability management principles; Cloud platforms; Security frameworks; Compliance standards", "domainList" : [ "security-operations-concepts", "incident-response-methodologies", "vulnerability-management-principles", "cloud-platforms", "security-frameworks", "compliance-standards" ], "domainSpecificKnowledge" : [ "Security operations concepts", "Incident response methodologies", "Vulnerability management principles", "Cloud platforms", "Security frameworks", "Compliance standards" ], "toolProficiency" : [ "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "communicationSkills" : "Written communication; Verbal communication; Technical audiences; Executive audiences", "documentationSkills" : "Documentation; Playbooks; Standard operating procedures", "problemSolvingSkills" : "Analytical skills; Troubleshooting skills; Issue resolution", "qualificationsBasic" : "5+ years experience in security operations, Bachelor's degree and above in Computer Science", "qualificationsPreferred" : "CISA, CISSP, CISM certifications", "remoteFriendly" : false, "rawDescription" : "Objective of job To safeguard the organization's information assets by proactively managing security risks, effectively responding to incidents, and continuously improving the overall security posture. -Protect the organization's information assets by maintaining confidentiality, integrity, and availability. -Proactively identify, assess, and mitigate security risks and vulnerabilities. -Lead and coordinate effective responses to security incidents, minimizing impact and ensuring timely recovery. -Continuously improve the organization's security posture through proactive monitoring, analysis, and implementation of security best practices. -Ensure compliance with relevant security standards, regulations, and policies. Job designation •Security Incident Management -Monitor and respond to security incidents in alignment with incident response protocols. -Lead incident response efforts to ensure timely containment, eradication, and recovery from security threats. -Conduct thorough investigations of security incidents, including log analysis, host-based and network forensic investigations, to determine the root cause and impact. -Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement. -Coordinate investigation, containment, and other response activities with business stakeholders and groups. •Vulnerability Management -Conduct vulnerability assessments and manage remediation efforts. -Continually identify, assess, report on, manage, and remediate vulnerabilities across endpoints, workloads, and systems. •Security Operations -Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy. -Analyze and improve security measures by assessing and updating policies, configurations, and procedures. -Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures -Develop and maintain documentation, playbooks, and standard operating procedures. -Perform onboarding of new team members and facilitate smooth integration. -Help develop processes used for internal and external planning and collaboration. -Provide technical and administrative support for day-to-day operations. •Collaboration and Communication -Collaborate with IT and RD application teams to ensure security is integrated into all stages of the software development lifecycle. -Provide security training and awareness programs for employees. -Communicate security status, risks, and incidents to executive leadership and other key stakeholders. Qualification •Technical Skills and Knowledge: -Strong understanding of security operations concepts, incident response methodologies, and vulnerability management principles. Hands-on experience administering and configuring security tools such as SIEM, SOAR, firewalls, intrusion detection/prevention systems, and vulnerability scanners. -Familiarity with scripting languages (e.g., Python, PowerShell) for task automation and tool customization. -Knowledge of cloud platforms such as AWS, Azure, Ali Cloud or other cloud platform. -Strong analytical and troubleshooting skills for rapid issue resolution under pressure. -Excellent communication skills, both written and verbal, for technical and executive audiences. -Adaptability and resilience in the face of evolving cyber threats. •Proficiency in security frameworks and various compliance standards like ISO 27001, SOC, NIST, etc. •Relevant certifications, CISA, CISSP, CISM •> 5 years experience in security operations, incident response, threat detection and analysis, or similar roles •Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Security Operation at Mercedes-Benz Group China Ltd.. Skills: Security operations, Incident response, Vulnerability management. Safeguard information assets. Manage security risks", "createdAt" : "2026-06-14T20:49:19.814", "lastUpdated" : "2026-06-16T01:03:53.353", "ingestTimestamp" : "2026-06-14T20:49:19.814", "mongoId" : "69cf73592beec4dd3d9c848a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Log analysis", "Forensic investigations", "Adaptability", "Security operations", "Incident response", "Vulnerability management", "Risk assessment", "Troubleshooting", "Security operations concepts", "Incident response methodologies", "Vulnerability management principles", "Cloud platforms", "Security frameworks", "Compliance standards", "CISA", "CISSP", "CISM", "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1101.1769, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305569f292fd229cf1f517", "title" : "Lead IT Security Analyst", "company" : "Culina Group", "industry" : "Logistics And Supply Chain", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead IT Security Analyst in Lutterworth, United Kingdom, adjusted for the logistics industry and company size." }, "location" : "lutterworth , United Kingdom", "locations" : [ "lutterworth ", "United Kingdom" ], "certifications" : [ "YSA+", "AZ-500", "CCNA Security", "CEH" ], "timestamp" : "2026-06-16T09:33:29.877", "fingerprint" : "a85d64477494a256b1fa39a8bad5337abc5a42219c71d72e2274b6f706b402af", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/CulinaGroup1/744000132259622-lead-it-security-analyst", "externalId" : "744000132259622", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lutterworth", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.4552224,-1.1997815" } ], "locationText" : "Lutterworth, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, Firewalls, Network security, IAM, DLP, Email security, Vulnerability scanning, Cloud platforms, Hybrid infrastructures", "professionalSkills" : [ "Threat intelligence analysis", "Security assessments", "Architecture reviews", "Access controls", "Identity management", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles" ], "hardSkillsList" : [ "Incident response", "Root cause analysis", "Threat detection", "Security operations", "Vulnerability management", "Secure configuration", "Access control management", "Identity management", "Privileged access management" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Secure configuration", "level" : "intermediate" }, { "name" : "Access control management", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Privileged access management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cyber security operations, Infrastructure protection, Vulnerability management, Incident response", "majorSkillsList" : [ "Cyber security operations", "Infrastructure protection", "Vulnerability management", "Incident response" ], "coreResponsibilities" : "Act as senior escalation point, Lead cyber incident response, Oversee security operations, Ensure effective configuration, Collaborate with managed security providers, Lead vulnerability management programme, Coordinate remediation activities, Analyse threat intelligence, Provide clear recommendations, Conduct security assessments, Support secure architecture reviews, Ensure secure configuration standards, Review and strengthen access controls, Maintain and enhance core security technologies, Support lifecycle management of security tools, Evaluate and recommend new technologies, Identify opportunities to strengthen controls, Mentor and support junior analysts, Contribute to IT security roadmap, Act as trusted technical advisor, Provide regular updates, Represent IT Security across projects", "teamCollaboration" : "Cross-functional teams; IT architects; Solution designers; Infrastructure teams; Cloud teams; Networking teams; Service teams; Head of IT Security", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cyber security; Infrastructure protection; Vulnerability management; Incident response; Cloud platforms; Hybrid infrastructures; Security operations; Threat intelligence; Secure configuration standards; Access controls; Identity management; Privileged access", "domainList" : [ "cyber-security", "infrastructure-protection", "vulnerability-management", "incident-response", "cloud-platforms", "hybrid-infrastructures", "security-operations", "threat-intelligence", "secure-configuration-standards", "access-controls", "identity-management", "privileged-access" ], "domainSpecificKnowledge" : [ "Cyber security", "Infrastructure protection", "Vulnerability management", "Incident response", "Cloud platforms", "Hybrid infrastructures", "Security operations", "Threat intelligence", "Secure configuration standards", "Access controls", "Identity management", "Privileged access" ], "toolProficiency" : [ "SIEM", "EDR", "Firewalls", "Network security tools", "IAM", "DLP", "Email security", "Vulnerability scanning" ], "communicationSkills" : "Technical information communication", "continuousLearning" : "Employee development programmes", "problemSolvingSkills" : "Analytical mindset; Identify vulnerabilities; Assess threats; Prioritise actions", "outcomesObjectives" : "Strengthen organisation's cyber security; Ensure confidentiality, integrity, availability; Reduce risk exposure; Improve security capability; Enhance overall security maturity; Embed security-by-design principles", "qualificationsBasic" : "3-5+ years' experience in IT security, 3-5+ years' experience in cyber security operations, 3-5+ years' experience in infrastructure protection, 3-5+ years' experience in vulnerability management, 3-5+ years' experience in incident response, CIS Hardening standards implementation, Experience with SIEM, Experience with EDR, Experience with IAM, Experience with DLP, Experience with email security, Experience with vulnerability scanning, Experience with cloud platforms, Experience with hybrid infrastructures, Experience in structured security operations, Experience in SOC environments, YSA+ certification, AZ-500 certification, CCNA Security certification, CEH certification", "qualificationsPreferred" : "Broader exposure to enterprise IT environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Culina group are a market leading ambient and chilled food & drink 3PL specialist, providing warehouse and distribution alongside fresh, food manufacturing, co-packing and bonded divisions. Working in partnership with some of the biggest household names in the food and drink sector. With over 20 million square feet of warehousing spread across 100+ depots, we employ in excess of 22,000 people to ensure that our 2.2 million deliveries reach the correct location. Our extensive network enables us to provide a comprehensive supply chain management service covering the whole of the UK and Ireland. Role Overview The Lead IT Security Analyst is a senior technical specialist responsible for strengthening the organisation's cyber security across security operations, infrastructure protection, vulnerability management, and incident response. Reporting to the Head of IT Security, this role plays a critical part in ensuring the confidentiality, integrity, and availability of systems and data. Acting as a senior escalation point, the role provides technical leadership, drives continuous improvement, and ensures security is embedded into all technology change and transformation activities. Key Responsibilities Technical Security Operations * Act as the senior escalation point for security events across SIEM, EDR, firewalls, and network security tools. * Lead cyber incident response activities, including triage, containment, investigation, and root cause analysis. * Oversee day-to-day security operations and threat detection capabilities across the IT estate. * Ensure the effective configuration, tuning, and maturity of SOC/SIEM tooling and alerting. * Collaborate with managed security service providers to ensure high-quality and timely service delivery. Vulnerability & Threat Management * Lead the vulnerability management programme across infrastructure, cloud, and applications. * Coordinate remediation activities with IT and operational teams to reduce risk exposure. * Analyse threat intelligence to identify emerging threats and vulnerabilities. * Provide clear recommendations on prioritisation and implementation of security controls. Technical Design, Assurance & Architecture * Conduct security assessments of new solutions, infrastructure changes, and cloud deployment. * Support secure architecture reviews alongside IT architects and solution designers. * Ensure secure configuration standards (e.g. CIS Hardening) are implemented and maintained. * Review and strengthen access controls, identity management, and privileged access processes. Security Tooling & Control Maturity * Maintain and enhance core security technologies (SIEM, EDR, IAM, DLP, email security, vulnerability scanning, etc.). * Support the lifecycle management of security tools and platforms. * Evaluate and recommend new technologies to improve security capability and resilience. Continuous Improvement & Technical Leadership * Identify opportunities to strengthen technical controls and enhance overall security maturity. * Mentor and support the development of junior Security Analysts. * Contribute to the IT security roadmap and continuous improvement initiatives. Stakeholder Engagement * Act as a trusted technical advisor to infrastructure, cloud, networking, and service teams. * Provide regular updates, insights, and escalation support to the Head of IT Security. * Represent IT Security across projects, ensuring security-by-design principles are embedded. Keys to Success * Strong technical expertise across cyber security operations, infrastructure, and threat management, with the ability to respond effectively to complex incidents. * Ability to lead and coordinate incident response and investigations, ensuring swift resolution and minimal business impact. * Proven capability to translate technical risks into practical solutions that balance security and operational needs. * Strong analytical mindset with the ability to identify vulnerabilities, assess threats, and prioritise actions effectively. * Skilled in communicating complex technical information clearly to both technical and non-technical stakeholders. * Ability to influence and collaborate across teams, acting as a trusted security advisor. * Demonstrated experience in mentoring and supporting junior team members, building overall team capability. * Proactive approach to continuous improvement, driving enhancements in tooling, processes, and controls. * Strong focus on security-by-design, ensuring robust security practices are embedded into all technology changes. * Resilient and adaptable, with the ability to operate effectively in a fast-paced, evolving threat landscape. ## Qualifications Essential Requirements * 3-5+ years' experience in IT security, cyber operations, SOC analysis, or similar technical security roles. * Strong understanding of core cyber security principles, including network security, cloud security, and infrastructure hardening. * Hands-on experience with key security technologies, including SIEM, EDR, firewalls, Identity & Access Management (IAM), and vulnerability scanning tools. * Proven experience in responding to cyber security incidents, including investigation, analysis, and remediation. * Familiarity with recognised security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework (CSF), and CIS Controls. * Strong analytical, problem-solving, and troubleshooting skills, with the ability to interpret complex technical data. Desirable * Relevant industry certifications such as Security+, CySA+, AZ-500, CCNA Security, CEH, or equivalent. * Broader exposure to enterprise IT environment, including cloud platforms and hybrid infrastructures. * Experience working within structured security operations or SOC environments. ## Additional Information As part of our drive to make Culina Group a great place to work. We are proud to be an inclusive and diverse organisation where we are committed to employee development and recognising success for hard working performers. Our dedicated learning and development programmes are open to every employee to give you the opportunity to shape your own future within logistics and continue to work in an environment where team culture thrives. Our People are the driving force behind our success, which is why we offer a wide range of benefits which include: * Annual Leave – Competitive holiday entitlement of 25 Days plus 8 Bank Holidays * Company Bonus – We do our best work to succeed together. When we achieve our goals you'll be rewarded through our bonus scheme * Private Medical Cover – This gives you peace of mind, you have choice, flexibility and speed of access to the most clinically appropriate care via Bupa * Pension scheme – we want colleagues to enjoy a comfortable retirement so we offer a great contribution of 5% employee and 8% employer * Life Assurance - x4 your annual salary * Wellness – Via our Employee Assistance Programme we offer immediate access to a confidential telephone counselling and legal information service that operates 24 hours a days, 365 days a year * Eye Care Vouchers – We can provide you with substantial savings with free eye tests and discounts on prescription glasses * Reward & Recognition – We recognise that employees have gone the extra mile via Employee of the month and year, special recognition and long service awards. * Everyday discounts - via our benefit platform you will have access to over 50 retailer discounts for everyday savings! If you meet the requirements for the above role and are looking for your next career opportunity please apply now and become a part of our #WinningTeam!", "summaryDescription" : "Lead IT Security Analyst at Culina Group. Skills: Cyber security operations, Infrastructure protection, Vulnerability management, Incident response. Act as senior escalation point. Lead cyber incident response", "postedDate" : "2026-06-15T18:08:42.000", "createdAt" : "2026-06-15T23:42:21.351", "lastUpdated" : "2026-06-16T09:33:29.877", "ingestTimestamp" : "2026-06-15T23:42:21.351", "mongoId" : "6a305569f292fd229cf1f517", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Incident response", "Root cause analysis", "Threat detection", "Security operations", "Vulnerability management", "Secure configuration", "Access control management", "Identity management", "Privileged access management", "Leadership", "Mentoring", "Cyber security operations", "Infrastructure protection", "Threat intelligence analysis", "Security assessments", "Architecture reviews", "Access controls", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles", "Roadmap planning", "Cyber security", "Cloud platforms", "Hybrid infrastructures", "Threat intelligence", "Secure configuration standards", "YSA+", "AZ-500", "CCNA Security", "CEH", "SIEM", "EDR", "Firewalls", "Network security tools", "IAM", "DLP", "Email security", "Vulnerability scanning" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 1098.1743, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3057f3f292fd229cf3f142", "title" : "Lead IT Security Analyst", "company" : "Culina Group", "industry" : "Logistics And Supply Chain", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead IT Security Analyst in Lutterworth, United Kingdom, adjusted for the logistics industry and company size." }, "location" : "lutterworth , United Kingdom", "locations" : [ "lutterworth ", "United Kingdom" ], "certifications" : [ "YSA+", "AZ-500", "CCNA Security", "CEH" ], "timestamp" : "2026-06-16T09:33:04.036", "fingerprint" : "e4d4c4fd0f1c1ce416092cfe267db19ccae4a8bacf5331fa4c9c7223dd090489", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/CulinaGroup1/744000132259622-lead-it-security-analyst", "externalId" : "744000132259622", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lutterworth", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.4552224,-1.1997815" } ], "locationText" : "Lutterworth, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, Firewalls, Network security, IAM, DLP, Email security, Vulnerability scanning, Cloud platforms, Hybrid infrastructures", "professionalSkills" : [ "Threat intelligence analysis", "Security assessments", "Secure architecture reviews", "Access controls", "Identity management", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles" ], "hardSkillsList" : [ "Incident response", "Root cause analysis", "Threat detection", "Configuration tuning", "Remediation coordination", "Security control implementation" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Configuration tuning", "level" : "intermediate" }, { "name" : "Remediation coordination", "level" : "intermediate" }, { "name" : "Security control implementation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cyber security operations, Infrastructure protection, Vulnerability management, Incident response", "majorSkillsList" : [ "Cyber security operations", "Infrastructure protection", "Vulnerability management", "Incident response" ], "coreResponsibilities" : "Act as senior escalation point, Lead cyber incident response, Oversee security operations, Oversee threat detection, Ensure SOC/SIEM tooling configuration, Ensure SOC/SIEM tooling tuning, Ensure SOC/SIEM tooling maturity, Collaborate with managed security providers, Lead vulnerability management programme, Coordinate remediation activities, Analyse threat intelligence, Provide recommendations on security controls, Conduct security assessments, Support secure architecture reviews, Ensure secure configuration standards, Review access controls, Review identity management, Review privileged access processes, Maintain core security technologies, Enhance core security technologies, Support security tool lifecycle management, Support security platform lifecycle management, Evaluate new technologies, Recommend new technologies, Identify opportunities to strengthen controls, Identify opportunities to enhance maturity, Mentor junior analysts, Support junior analyst development, Contribute to IT security roadmap, Contribute to continuous improvement", "teamCollaboration" : "With managed security providers; With IT teams; With operational teams; With IT architects; With solution designers; With infrastructure teams; With cloud teams; With networking teams; With service teams; Across projects", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cyber security; Infrastructure protection; Vulnerability management; Incident response; Cloud platforms; Hybrid infrastructures; Security operations; SOC environments; CIS Hardening", "domainList" : [ "cyber-security", "infrastructure-protection", "vulnerability-management", "incident-response", "cloud-platforms", "hybrid-infrastructures", "security-operations", "soc-environments", "cis-hardening" ], "domainSpecificKnowledge" : [ "Cyber security", "Infrastructure protection", "Vulnerability management", "Incident response", "Cloud platforms", "Hybrid infrastructures", "Security operations", "SOC environments", "CIS Hardening" ], "toolProficiency" : [ "SIEM tooling", "EDR tooling", "Firewalls", "Network security tools", "Vulnerability scanning tools", "IAM tools", "DLP tools", "Email security tools" ], "communicationSkills" : "Technical information communication", "continuousLearning" : "Employee development programmes", "problemSolvingSkills" : "Analytical mindset; Identify vulnerabilities; Assess threats; Prioritise actions; Root cause analysis", "outcomesObjectives" : "Reduce risk exposure; Improve security capability; Enhance security resilience; Strengthen technical controls; Enhance security maturity; Build team capability", "qualificationsBasic" : "3-5+ years' experience in IT security, 3-5+ years' experience in cyber security operations, 3-5+ years' experience in infrastructure protection, 3-5+ years' experience in vulnerability management, 3-5+ years' experience in incident response, CIS Hardening standards implementation, Experience with SIEM, Experience with EDR, Experience with IAM, Experience with DLP, Experience with email security, Experience with vulnerability scanning, Experience with cloud platforms, Experience with hybrid infrastructures, Experience in structured security operations, Experience in SOC environments, YSA+ certification, AZ-500 certification, CCNA Security certification, CEH certification", "qualificationsPreferred" : "Broader exposure to enterprise IT environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Culina group are a market leading ambient and chilled food & drink 3PL specialist, providing warehouse and distribution alongside fresh, food manufacturing, co-packing and bonded divisions. Working in partnership with some of the biggest household names in the food and drink sector. With over 20 million square feet of warehousing spread across 100+ depots, we employ in excess of 22,000 people to ensure that our 2.2 million deliveries reach the correct location. Our extensive network enables us to provide a comprehensive supply chain management service covering the whole of the UK and Ireland. Role Overview The Lead IT Security Analyst is a senior technical specialist responsible for strengthening the organisation's cyber security across security operations, infrastructure protection, vulnerability management, and incident response. Reporting to the Head of IT Security, this role plays a critical part in ensuring the confidentiality, integrity, and availability of systems and data. Acting as a senior escalation point, the role provides technical leadership, drives continuous improvement, and ensures security is embedded into all technology change and transformation activities. Key Responsibilities Technical Security Operations * Act as the senior escalation point for security events across SIEM, EDR, firewalls, and network security tools. * Lead cyber incident response activities, including triage, containment, investigation, and root cause analysis. * Oversee day-to-day security operations and threat detection capabilities across the IT estate. * Ensure the effective configuration, tuning, and maturity of SOC/SIEM tooling and alerting. * Collaborate with managed security service providers to ensure high-quality and timely service delivery. Vulnerability & Threat Management * Lead the vulnerability management programme across infrastructure, cloud, and applications. * Coordinate remediation activities with IT and operational teams to reduce risk exposure. * Analyse threat intelligence to identify emerging threats and vulnerabilities. * Provide clear recommendations on prioritisation and implementation of security controls. Technical Design, Assurance & Architecture * Conduct security assessments of new solutions, infrastructure changes, and cloud deployment. * Support secure architecture reviews alongside IT architects and solution designers. * Ensure secure configuration standards (e.g. CIS Hardening) are implemented and maintained. * Review and strengthen access controls, identity management, and privileged access processes. Security Tooling & Control Maturity * Maintain and enhance core security technologies (SIEM, EDR, IAM, DLP, email security, vulnerability scanning, etc.). * Support the lifecycle management of security tools and platforms. * Evaluate and recommend new technologies to improve security capability and resilience. Continuous Improvement & Technical Leadership * Identify opportunities to strengthen technical controls and enhance overall security maturity. * Mentor and support the development of junior Security Analysts. * Contribute to the IT security roadmap and continuous improvement initiatives. Stakeholder Engagement * Act as a trusted technical advisor to infrastructure, cloud, networking, and service teams. * Provide regular updates, insights, and escalation support to the Head of IT Security. * Represent IT Security across projects, ensuring security-by-design principles are embedded. Keys to Success * Strong technical expertise across cyber security operations, infrastructure, and threat management, with the ability to respond effectively to complex incidents. * Ability to lead and coordinate incident response and investigations, ensuring swift resolution and minimal business impact. * Proven capability to translate technical risks into practical solutions that balance security and operational needs. * Strong analytical mindset with the ability to identify vulnerabilities, assess threats, and prioritise actions effectively. * Skilled in communicating complex technical information clearly to both technical and non-technical stakeholders. * Ability to influence and collaborate across teams, acting as a trusted security advisor. * Demonstrated experience in mentoring and supporting junior team members, building overall team capability. * Proactive approach to continuous improvement, driving enhancements in tooling, processes, and controls. * Strong focus on security-by-design, ensuring robust security practices are embedded into all technology changes. * Resilient and adaptable, with the ability to operate effectively in a fast-paced, evolving threat landscape. ## Qualifications Essential Requirements * 3-5+ years' experience in IT security, cyber operations, SOC analysis, or similar technical security roles. * Strong understanding of core cyber security principles, including network security, cloud security, and infrastructure hardening. * Hands-on experience with key security technologies, including SIEM, EDR, firewalls, Identity & Access Management (IAM), and vulnerability scanning tools. * Proven experience in responding to cyber security incidents, including investigation, analysis, and remediation. * Familiarity with recognised security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework (CSF), and CIS Controls. * Strong analytical, problem-solving, and troubleshooting skills, with the ability to interpret complex technical data. Desirable * Relevant industry certifications such as Security+, CySA+, AZ-500, CCNA Security, CEH, or equivalent. * Broader exposure to enterprise IT environment, including cloud platforms and hybrid infrastructures. * Experience working within structured security operations or SOC environments. ## Additional Information As part of our drive to make Culina Group a great place to work. We are proud to be an inclusive and diverse organisation where we are committed to employee development and recognising success for hard working performers. Our dedicated learning and development programmes are open to every employee to give you the opportunity to shape your own future within logistics and continue to work in an environment where team culture thrives. Our People are the driving force behind our success, which is why we offer a wide range of benefits which include: * Annual Leave – Competitive holiday entitlement of 25 Days plus 8 Bank Holidays * Company Bonus – We do our best work to succeed together. When we achieve our goals you'll be rewarded through our bonus scheme * Private Medical Cover – This gives you peace of mind, you have choice, flexibility and speed of access to the most clinically appropriate care via Bupa * Pension scheme – we want colleagues to enjoy a comfortable retirement so we offer a great contribution of 5% employee and 8% employer * Life Assurance - x4 your annual salary * Wellness – Via our Employee Assistance Programme we offer immediate access to a confidential telephone counselling and legal information service that operates 24 hours a days, 365 days a year * Eye Care Vouchers – We can provide you with substantial savings with free eye tests and discounts on prescription glasses * Reward & Recognition – We recognise that employees have gone the extra mile via Employee of the month and year, special recognition and long service awards. * Everyday discounts - via our benefit platform you will have access to over 50 retailer discounts for everyday savings! If you meet the requirements for the above role and are looking for your next career opportunity please apply now and become a part of our #WinningTeam!", "summaryDescription" : "Lead IT Security Analyst at Culina Group. Skills: Cyber security operations, Infrastructure protection, Vulnerability management, Incident response. Act as senior escalation point. Lead cyber incident response", "postedDate" : "2026-06-15T18:08:42.000", "createdAt" : "2026-06-15T23:41:05.435", "lastUpdated" : "2026-06-16T09:33:04.036", "ingestTimestamp" : "2026-06-15T23:41:05.435", "mongoId" : "6a3057f3f292fd229cf3f142", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Incident response", "Root cause analysis", "Threat detection", "Configuration tuning", "Remediation coordination", "Security control implementation", "Leadership", "Mentoring", "Cyber security operations", "Infrastructure protection", "Vulnerability management", "Threat intelligence analysis", "Security assessments", "Secure architecture reviews", "Access controls", "Identity management", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles", "Roadmap planning", "Cyber security", "Cloud platforms", "Hybrid infrastructures", "Security operations", "SOC environments", "CIS Hardening", "YSA+", "AZ-500", "CCNA Security", "CEH", "SIEM tooling", "EDR tooling", "Firewalls", "Network security tools", "Vulnerability scanning tools", "IAM tools", "DLP tools", "Email security tools" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 1098.1743, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307731f292fd229c02354a", "title" : "Software Engineer II, Security Engineering (Auth0)", "company" : "Okta", "industry" : "Cybersecurity", "salary" : { "min" : 105000.0, "max" : 145000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Software Engineer II in Toronto, Canada, adjusted for the technology industry and mid-level experience." }, "location" : "Toronto, ON, Canada", "locations" : [ "Toronto", "ON", "Canada" ], "timestamp" : "2026-06-16T11:53:46.530", "fingerprint" : "a4b0058d7dade276f94fdd0af0df7464787f4bd6f244b7e2cb47dd30625fecf7", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.okta.com/company/careers/opportunity/8003538?gh_jid=8003538", "externalId" : "8003538", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Toronto", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.6534817,-79.3839347" } ], "locationText" : "Toronto, Ontario, Canada", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Go, Python, Kubernetes, Docker, AWS, GCP, Azure, Terraform, PostgreSQL, Redis, Kafka, SQL, NoSQL, REST, GRPC, Protobuf", "professionalSkills" : [ "System design", "API design", "Distributed systems" ], "hardSkillsList" : [ "Authentication", "Authorization", "Cryptography", "Security protocols" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "majorSkills" : "Security Engineering, Authentication, Authorization", "majorSkillsList" : [ "Security Engineering", "Authentication", "Authorization" ], "coreResponsibilities" : "Design and implement authentication and authorization systems, Build and maintain scalable microservices, Develop and manage CI/CD pipelines, Automate infrastructure provisioning and management, Monitor system performance and reliability, Troubleshoot and resolve production issues, Collaborate with product and engineering teams, Write technical documentation, Participate in code reviews, Mentor junior engineers", "teamCollaboration" : "Cross-functional teams; Engineering teams; Product teams", "projectManagementSkills" : [ "Agile methodologies", "Scrum" ], "domainKnowledge" : "Identity and Access Management; OAuth 2.0; OpenID Connect; SAML; JWT; TLS; Network security; Cloud security", "domainList" : [ "identity-and-access-management", "oauth-2-0", "openid-connect", "saml", "jwt", "tls", "network-security", "cloud-security" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "OAuth 2.0", "OpenID Connect", "SAML", "JWT", "TLS", "Network security", "Cloud security" ], "toolProficiency" : [ "Kubernetes", "Docker", "Terraform", "Prometheus", "Grafana", "Datadog", "Splunk", "Pprof", "Git" ], "communicationSkills" : "Technical documentation; Code reviews", "documentationSkills" : "Technical writing; API documentation; Architecture diagrams", "continuousLearning" : "Conferences; Training", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "3+ years experience", "remoteFriendly" : false, "rawDescription" : "Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. We are looking for a Software Engineer II to join the Auth0 Security Engineering organization. You'll help build and maintain the security guardrails for our multi-cloud environment, implementing security and compliance standards as programmatic, code-driven policies. What You Will Do Cloud Security Controls: Implement and maintain organization-wide controls (SCPs, Azure Policy) balancing protection with developer experience. Identity & Access Management (IAM): Build and update templates and permission boundaries that govern how services and humans interact with our cloud, applying the principle of least privilege. Infrastructure & Network Security: Contribute to the security standards for VPC architecture, edge networking, and cross-account connectivity. System Design: Help build systems and processes that validate the security posture of the platform, enforcing our security policies and surfacing actionable feedback for engineering teams. Growth & Collaboration: Partner with teammates across the organization, share what you learn, and continually deepen your security expertise. What You Bring Cloud & Infrastructure Experience: 3+ years of experience in software engineering or information security, with hands-on exposure to cloud-native environments, Kubernetes (EKS, AKS), and cloud security concepts. Policy & Automation: Experience building or maintaining automated controls and infrastructure-as-code, ideally within Terraform workflows. Security Mindset: An eagerness to identify attack vectors and think through risk in distributed systems, with a willingness to learn formal risk assessment practices. Tooling & AI Curiosity: Familiarity with security or cloud tooling, and an interest in applying AI to streamline security tasks and governance. Communication: Strong communication skills and the ability to collaborate effectively across teams. Education: A Bachelor's degree in Computer Science, Information Security, Systems Engineering, or a related field, or equivalent practical experience. Nice to Have Exposure to compliance frameworks such as SOC2, or HIPAA in a cloud environment. Proficiency in one or more languages used for automation and tooling, such as Python, Go, or JavaScript. Experience creating, managing, or securing containerized environments. Familiarity with service mesh (Istio) security policies and zero-trust networking concepts. #LI-HYBRID #LI-SH1 P-2247.2_3470231 Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can. The annual base salary range for this position for candidates located in Canada is between: $110,000—$151,800 CAD The Okta Experience Supporting Your Well-Being Driving Social Impact Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.", "summaryDescription" : "Software Engineer II, Security Engineering (Auth0) at Okta. Skills: Security Engineering, Authentication, Authorization. Design and implement authentication and authorization systems. Build and maintain scalable microservices", "postedDate" : "2026-06-16T01:19:30.925", "createdAt" : "2026-06-16T01:19:30.925", "lastUpdated" : "2026-06-16T11:53:46.530", "ingestTimestamp" : "2026-06-16T01:19:30.925", "mongoId" : "6a307731f292fd229c02354a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Cryptography", "Security protocols", "Security Engineering", "System design", "API design", "Distributed systems", "Agile methodologies", "Scrum", "Identity and Access Management", "OAuth 2.0", "OpenID Connect", "SAML", "JWT", "TLS", "Network security", "Cloud security", "Kubernetes", "Docker", "Terraform", "Prometheus", "Grafana", "Datadog", "Splunk", "Pprof", "Git" ], "skillCount" : 27, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 1089.6517, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69fe13404c40e2acd1e424bb", "title" : "Security Engineer II", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Corporate Operations, Systems Security Engineering, no business category", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "Security certifications" ], "timestamp" : "2026-06-15T07:36:45.908", "fingerprint" : "edf70a317b4df7cba49106ea35cb3557b215c25ff104f8e09beb9cdd182ddc3a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10412536/apply", "externalId" : "2cdd1605-7d6f-4dd4-89f7-a209c6862b3c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 1, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Security tools, Scripting languages", "professionalSkills" : [ "System design", "Risk assessment", "Incident response" ], "hardSkillsList" : [ "Vulnerability management", "Threat modeling", "Security architecture" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" } ], "majorSkills" : "Security engineering, Cloud security, Security tools", "majorSkillsList" : [ "Security engineering", "Cloud security", "Security tools" ], "coreResponsibilities" : "Design and implement security solutions, Develop and maintain security tools, Conduct security assessments, Respond to security incidents, Provide security guidance", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud security principles; Network security; Application security", "domainList" : [ "cloud-security-principles", "network-security", "application-security" ], "domainSpecificKnowledge" : [ "Cloud security principles", "Network security", "Application security" ], "toolProficiency" : [ "Security tools" ], "communicationSkills" : "Technical documentation; Presentations", "documentationSkills" : "Technical documentation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "5+ years of experience in security engineering, Bachelor's degree in Computer Science or related field, Experience with cloud security, Experience with security tools", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with security certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "MULTIPLE POSITIONS AVAILABLE Employer: AMAZON DEVELOPMENT CENTER U.S., INC., Offered Position: Security Engineer II Job Location: Seattle, Washington Job Number: AMZ9956929 Position Responsibilities: Provide frontline support for all information security related issues, such as penetration testing, network and service configuration, advising on security policy compliance, handling data confidentiality issues, and monitoring and responding to emerging threats. Contribute to the development of Information Security policies and process. Conduct application security reviews and recommend solutions to resolve application security issues. Provide information security support during events impacting tier one customer-facing services. Identify and troubleshoot recurring issues and escalate appropriately for full resolution. Position Requirements: Bachelor’s degree or foreign equivalent degree in Computer Science, Engineering, Information Systems or Technology, Mathematics or a related field and one year of experience in the job offered or a related occupation. Must have one year of experience in the following skill(s): (1) application and infrastructure information security; (2) application of threat modeling or other risk identification techniques; (3) knowledge of system security vulnerabilities and remediation techniques, including penetration testing, source code review, configuring advanced runtime and static vulnerability testing tools and the development of exploits; (4) programming in Java, C, C++, Perl, Ruby or Python; and (5) coordinating responsibility of technical security tasks. Amazon.com is an Equal Opportunity-Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation. 40 hours / week, 8:00am-5:00pm, Salary Range $159,300/year to $202,400/year. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, visit: https://www.aboutamazon.com/workplace/employee-benefits.#0000 Basic Qualifications: Position Requirements: Bachelor’s degree or foreign equivalent degree in Computer Science, Engineering, Information Systems or Technology, Mathematics or a related field and one year of experience in the job offered or a related occupation. Must have one year of experience in the following skill(s): (1) application and infrastructure information security; (2) application of threat modeling or other risk identification techniques; (3) knowledge of system security vulnerabilities and remediation techniques, including penetration testing, source code review, configuring advanced runtime and static vulnerability testing tools and the development of exploits; (4) programming in Java, C, C++, Perl, Ruby or Python; and (5) coordinating responsibility of technical security tasks.#0000 Preferred Qualifications: Please see job description and the position requirements above. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer II at Amazon Development Center U.S., Inc.. Skills: Security engineering, Cloud security, Security tools. Design and implement security solutions. Develop and maintain security tools", "postedDate" : "2026-06-13T18:08:50.353", "createdAt" : "2026-06-13T18:08:50.353", "lastUpdated" : "2026-06-15T07:36:45.908", "ingestTimestamp" : "2026-06-13T18:08:50.353", "mongoId" : "69fe13404c40e2acd1e424bb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10412536/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Threat modeling", "Security architecture", "Security engineering", "Cloud security", "Security tools", "System design", "Risk assessment", "Incident response", "Cloud security principles", "Network security", "Application security", "Security certifications" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 1085.9016, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307ec8f292fd229c0525f2", "title" : "Security Engineer", "company" : "Lambda", "industry" : "Data Center Business", "salary" : { "min" : 266000.0, "max" : 395000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco Office (Fremont St)", "locations" : [ "San Francisco Office (Fremont St)", "San Jose Office (First St)", "Bellevue, WA" ], "timestamp" : "2026-06-16T15:03:44.432", "fingerprint" : "27a6a3d9a13a31af94d015085a763b8ee545dd4f038149d94da6ca5023eb4e05", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/lambda/e5453baf-d2ec-43d1-9d3b-8fb3d5cdc9d1/application", "externalId" : "e5453baf-d2ec-43d1-9d3b-8fb3d5cdc9d1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "rawDescription" : "Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU. If you'd like to build the world's best AI cloud, join us. *Note: This position requires presence in our San Francisco/San Jose/Bellevue office location 4 days per week; Lambda’s designated work from home day is currently Tuesday. About the Role Lambda Security protects some of the world's most valuable digital assets: training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best-of-breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence. As a Security Engineer at Lambda, you'll touch many areas across the security program such as building detections, hardening infrastructure, reviewing designs, automating toil, and responding to incidents. Reporting to the Head of Security and partnering closely with Product Engineering, Data Center Operations and Engineering, IT, and embedded Technical Program Managers, your work shapes the security posture customers rely on. Security at Lambda directly enables customer trust and unlocks enterprise revenue. Our customers run billion-dollar training jobs and irreplaceable model weights on our infrastructure; our job is to make Lambda the safest place to build with AI. Over the next 12-18 months, you'll help deliver our 2026 security roadmap, expand detection coverage for AI-specific threats, help mature our incident response program, and ship security automation that other engineering teams adopt voluntarily. You'll also have direct access to LLMs hosted on Lambda's own infrastructure to push security operations beyond what's possible elsewhere. Security is a broad field, and we don't expect you to be an expert in everything our team does, but we do expect you to learn quickly, ship across domains, and support the specialists around you. If you enjoy moving between detection, architecture, and platform work and want to build security alongside the engineers you're protecting rather than from the outside then we'd love to talk. We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, please still apply and help us understand your readiness for this role. Your application is not a waste of our time. What You'll Do - Build and Tune Detections: Develop and refine detection content across our SIEM and EDR to catch threats targeting customer data, model weights, and infrastructure. - Respond to Incidents: Participate in on-call, lead investigations end-to-end, and turn each incident into automation, playbooks, or controls that prevent the next one. - Harden Systems Directly: Remediate vulnerabilities and security findings in production, partnering with engineering teams when fixes cross team boundaries. - Review Architectures and Code: Provide actionable security feedback on high-level designs and individual changes, and turn recurring review patterns into reusable standards. - Build Security Tooling: Ship Python or Go services that automate evidence collection, vulnerability triage, and other toil, using Lambda's hosted LLMs where they meaningfully accelerate the work. - Partner Across Engineering: Work with Product Engineering, Data Center Operations and Engineering, IT, and Legal to land security improvements at the moments they're cheapest to adopt. - Balance Strategic and Tactical: Recognize when to invest in a long-term fix versus when \"good enough\" is exactly that, and bias toward measurable forward progress. What We Think a Candidate Needs to Demonstrate to Succeed - 5+ years of demonstrated security engineering experience, either directly as a security engineer or as an engineer driving security outcomes. We also welcome equivalent backgrounds: significant formal security training paired with strong engineering experience. - A track record of working across security domains; for example, shipping detection work in one role and architecture, platform, or vulnerability management work in another. We don't expect mastery of every domain; we do expect demonstrated breadth and eagerness to learn. - Thrives in high-speed, high-ambiguity startup environments where priorities shift regularly and structure must be built while executing. - Strong hands-on Linux experience that showcases your ability to protect both our applications and the cloud we build underneath them. - Comfortable solving problems in Python, Go, or a similar language, with the discipline to ship production-grade tooling rather than only one-off scripts. - Excellent collaboration with technical teams both with and without authority (we're all on the same team!). Nice to Have - You've led or developed a meaningful component of a security program (detection & response, security architecture, platform/tooling, vulnerability management, GRC operations, etc.). - Experience driving or providing significant evidence for compliance audits such as SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, or FedRAMP. - Significant experience operating large-scale production services (e.g., SRE across thousands of hosts) or with virtualization at scale (KVM, Hyper-V, Xen). - You've built or deployed critical security infrastructure such as SIEM, SOAR, EDR, IDS/IPS, or canary/honeypot systems. - Experience with AI/ML infrastructure security, model security, or protecting high-value computational workloads. - Enthusiasm about leveraging direct access to state-of-the-art LLMs to push security operations beyond the status quo, including through automated triage, intelligent alert correlation, AI-assisted code review. Salary Range Information The annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description. About Lambda - Founded in 2012, with 500+ employees, and growing fast - Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove - We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG - Our values are publicly available: https://lambda.ai/careers - We offer generous cash & equity compensation - Health, dental, and vision coverage for you and your dependents - Wellness and commuter stipends for select roles - 401k Plan with 2% company match (USA employees) - Flexible paid time off plan that we all actually use A Final Note: You do not need to match all of the listed expectations to apply for this position. We are committed to building a team with a variety of backgrounds, experiences, and skills. Equal Opportunity Employer Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.", "summaryDescription" : "Security Engineer at Lambda", "createdAt" : "2026-06-16T01:59:53.624", "lastUpdated" : "2026-06-16T15:03:44.432", "ingestTimestamp" : "2026-06-16T01:59:53.624", "mongoId" : "6a307ec8f292fd229c0525f2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 266000, "salaryAnnualMax" : 395000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 1084.5032, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6ae374d8ee00a090ee1a", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2500000.0, "max" : 4000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T09:39:27.679", "fingerprint" : "01d7824291008376c7b6e17f1602e170a7f25cac0134b1861071c3308ed3b798", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=5154663008", "externalId" : "5154663008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Network security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Lead Zero Trust implementation, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Perform technical design reviews, Triage security bugs, Recommend solutions for security bugs, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Support RFI's, Evaluate new security solutions, Conduct POCs", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "domainKnowledge" : "Cyber Security; Infrastructure security; AI risk assessments; Emerging threat landscapes; Network protocols; Networking concepts; Security engineering; System security; Network security; Authentication protocols; Security protocols; Application security; Cloud Concepts; AI threat modeling; LLM components; Public cloud; Private cloud; On-prem infrastructure; Abuse risks", "domainList" : [ "cyber-security", "infrastructure-security", "ai-risk-assessments", "emerging-threat-landscapes", "network-protocols", "networking-concepts", "security-engineering", "system-security", "network-security", "authentication-protocols", "security-protocols", "application-security", "cloud-concepts", "ai-threat-modeling", "llm-components", "public-cloud", "private-cloud", "on-prem-infrastructure", "abuse-risks" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "System security", "Network security", "Authentication protocols", "Security protocols", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "communicationSkills" : "Articulate security concepts; Technical stakeholders", "continuousLearning" : "Learning new security products; Learning new security features; Learning new security strategies", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Assess complex security risks; Mitigate complex security risks", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Lead Zero Trust implementation", "postedDate" : "2026-06-14T08:55:22.103", "createdAt" : "2026-06-14T08:55:22.103", "lastUpdated" : "2026-06-15T09:39:27.679", "ingestTimestamp" : "2026-06-14T08:55:22.103", "mongoId" : "6a2c6ae374d8ee00a090ee1a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Cyber Security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1078.97, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305f0df292fd229cf77c83", "title" : "Security Engineer", "company" : "Lambda", "industry" : "Data Center Business", "salary" : { "min" : 266000.0, "max" : 395000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco Office (Fremont St)", "locations" : [ "San Francisco Office (Fremont St)", "San Jose Office (First St)", "Bellevue, WA" ], "timestamp" : "2026-06-16T13:20:54.759", "fingerprint" : "d18d091cfc9e86e1c469af42af986f3a5f7a1fdca4f9c3536b818cd2d12694bf", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Lambda/e5453baf-d2ec-43d1-9d3b-8fb3d5cdc9d1/application", "externalId" : "e5453baf-d2ec-43d1-9d3b-8fb3d5cdc9d1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "rawDescription" : "Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU. If you'd like to build the world's best AI cloud, join us. *Note: This position requires presence in our San Francisco/San Jose/Bellevue office location 4 days per week; Lambda’s designated work from home day is currently Tuesday. About the Role Lambda Security protects some of the world's most valuable digital assets: training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best-of-breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence. As a Security Engineer at Lambda, you'll touch many areas across the security program such as building detections, hardening infrastructure, reviewing designs, automating toil, and responding to incidents. Reporting to the Head of Security and partnering closely with Product Engineering, Data Center Operations and Engineering, IT, and embedded Technical Program Managers, your work shapes the security posture customers rely on. Security at Lambda directly enables customer trust and unlocks enterprise revenue. Our customers run billion-dollar training jobs and irreplaceable model weights on our infrastructure; our job is to make Lambda the safest place to build with AI. Over the next 12-18 months, you'll help deliver our 2026 security roadmap, expand detection coverage for AI-specific threats, help mature our incident response program, and ship security automation that other engineering teams adopt voluntarily. You'll also have direct access to LLMs hosted on Lambda's own infrastructure to push security operations beyond what's possible elsewhere. Security is a broad field, and we don't expect you to be an expert in everything our team does, but we do expect you to learn quickly, ship across domains, and support the specialists around you. If you enjoy moving between detection, architecture, and platform work and want to build security alongside the engineers you're protecting rather than from the outside then we'd love to talk. We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, please still apply and help us understand your readiness for this role. Your application is not a waste of our time. What You'll Do - Build and Tune Detections: Develop and refine detection content across our SIEM and EDR to catch threats targeting customer data, model weights, and infrastructure. - Respond to Incidents: Participate in on-call, lead investigations end-to-end, and turn each incident into automation, playbooks, or controls that prevent the next one. - Harden Systems Directly: Remediate vulnerabilities and security findings in production, partnering with engineering teams when fixes cross team boundaries. - Review Architectures and Code: Provide actionable security feedback on high-level designs and individual changes, and turn recurring review patterns into reusable standards. - Build Security Tooling: Ship Python or Go services that automate evidence collection, vulnerability triage, and other toil, using Lambda's hosted LLMs where they meaningfully accelerate the work. - Partner Across Engineering: Work with Product Engineering, Data Center Operations and Engineering, IT, and Legal to land security improvements at the moments they're cheapest to adopt. - Balance Strategic and Tactical: Recognize when to invest in a long-term fix versus when \"good enough\" is exactly that, and bias toward measurable forward progress. What We Think a Candidate Needs to Demonstrate to Succeed - 5+ years of demonstrated security engineering experience, either directly as a security engineer or as an engineer driving security outcomes. We also welcome equivalent backgrounds: significant formal security training paired with strong engineering experience. - A track record of working across security domains; for example, shipping detection work in one role and architecture, platform, or vulnerability management work in another. We don't expect mastery of every domain; we do expect demonstrated breadth and eagerness to learn. - Thrives in high-speed, high-ambiguity startup environments where priorities shift regularly and structure must be built while executing. - Strong hands-on Linux experience that showcases your ability to protect both our applications and the cloud we build underneath them. - Comfortable solving problems in Python, Go, or a similar language, with the discipline to ship production-grade tooling rather than only one-off scripts. - Excellent collaboration with technical teams both with and without authority (we're all on the same team!). Nice to Have - You've led or developed a meaningful component of a security program (detection & response, security architecture, platform/tooling, vulnerability management, GRC operations, etc.). - Experience driving or providing significant evidence for compliance audits such as SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, or FedRAMP. - Significant experience operating large-scale production services (e.g., SRE across thousands of hosts) or with virtualization at scale (KVM, Hyper-V, Xen). - You've built or deployed critical security infrastructure such as SIEM, SOAR, EDR, IDS/IPS, or canary/honeypot systems. - Experience with AI/ML infrastructure security, model security, or protecting high-value computational workloads. - Enthusiasm about leveraging direct access to state-of-the-art LLMs to push security operations beyond the status quo, including through automated triage, intelligent alert correlation, AI-assisted code review. Salary Range Information The annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description. About Lambda - Founded in 2012, with 500+ employees, and growing fast - Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove - We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG - Our values are publicly available: https://lambda.ai/careers - We offer generous cash & equity compensation - Health, dental, and vision coverage for you and your dependents - Wellness and commuter stipends for select roles - 401k Plan with 2% company match (USA employees) - Flexible paid time off plan that we all actually use A Final Note: You do not need to match all of the listed expectations to apply for this position. We are committed to building a team with a variety of backgrounds, experiences, and skills. Equal Opportunity Employer Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.", "summaryDescription" : "Security Engineer at Lambda", "createdAt" : "2026-06-16T00:29:24.148", "lastUpdated" : "2026-06-16T13:20:54.759", "ingestTimestamp" : "2026-06-16T00:29:24.148", "mongoId" : "6a305f0df292fd229cf77c83", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 266000, "salaryAnnualMax" : 395000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 1078.5775, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a25145a74d8ee00a00bb513", "title" : "Security Engineer II", "company" : "Amazon.com Services LLC", "industry" : "Operations, IT, Support Engineering, Systems Security Engineering, finance", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Washington, USA", "locations" : [ "Washington, USA" ], "timestamp" : "2026-06-15T05:49:51.627", "fingerprint" : "6478f697a920bd6efb51c6932cd34cd65cd77f21520fb341f26b173412e80916", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441020/apply", "externalId" : "f548b30b-b34d-4100-b0df-5c2008b81e8d", "industryFunction" : { }, "structuredLocations" : [ { "state" : "Washington", "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Ruby, Go, Swift, Java, C++, .Net, HTTP, DNS, TCP/IP, AWS, AI, ML", "professionalSkills" : [ "Vulnerability assessment", "Exploitation", "Penetration testing", "Red teaming", "Source code analysis", "Network penetration", "Application exploitation", "Security assessments", "Security architectures", "Audit capabilities", "Threat modeling", "Secure coding", "Identity management", "System administration", "Network security", "Software development", "Cryptography" ], "hardSkillsList" : [ "Security code review", "Systems troubleshooting", "Log analysis", "Task automation" ], "softSkillsList" : [ "Operate independently" ], "hardSkills" : [ { "name" : "Security code review", "level" : "intermediate" }, { "name" : "Systems troubleshooting", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Task automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Operate independently" } ], "majorSkills" : "Security engineering, Vulnerability assessment, Penetration testing, AI security", "majorSkillsList" : [ "Security engineering", "Vulnerability assessment", "Penetration testing", "AI security" ], "coreResponsibilities" : "Lead security audits, Assess security controls, Identify security risks, Investigate security control failures, Drive root-cause resolution, Assess security controls around AI/ML, Build reusable security frameworks, Build runbooks, Build rubrics, Communicate security risk findings, Communicate recommendations", "teamCollaboration" : "Partner with engineering teams; Work with highly-skilled teams", "domainKnowledge" : "Cloud-native architecture; AI/ML security; Security controls", "domainList" : [ "cloud-native-architecture", "ai-ml-security", "security-controls" ], "domainSpecificKnowledge" : [ "Cloud-native architecture", "AI/ML security", "Security controls" ], "communicationSkills" : "Communicate risks", "innovationCreativity" : "Design novel abuse scenarios", "problemSolvingSkills" : "Troubleshooting systems issues; Root-cause resolution", "qualificationsBasic" : "3+ years programming Python, Ruby, Go, Swift, Java, .Net, C++, 2+ years scripting, programming, security code review, 2+ years troubleshooting systems issues, analyzing logs, automating tasks, Bachelor's degree STEM or 2+ years IT Security experience, Knowledge of networking protocols HTTP, DNS, TCP/IP, Knowledge of security vulnerabilities and remediation", "qualificationsPreferred" : "2+ years threat modeling, secure coding, identity management, software development, cryptography, system administration, network security, Knowledge of command line tools, Knowledge of networking protocols HTTP(S), DNS, TCP/IP, Experience with AWS products and services, Experience scripting, programming, security code reviewing Python, Java, C++, Experience performing security activities across SDLC phases", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are seeking a Security Engineer II to join our mission of protecting customer data and keeping Amazon secure. In this role you will be working to secure multiple Amazon businesses across the Devices, Media & Entertainment, Advertising, Alexa, and Corporate spaces. You will partner with world-class engineering teams to uncover vulnerabilities, design novel abuse scenarios, and assess large-scale security solutions across Amazon's products, services, and infrastructure. In this role, you will leverage your skills in vulnerability assessment, exploitation, penetration testing, and red teaming to identify and mitigate risks. Your work will span source code analysis, network penetration, and application exploitation. You will design, implement, and execute methodologies for security assessments of critical Amazon systems. You will be exposed to the full breadth of technology used across Amazon and its subsidiaries, influence security architectures, and communicate risks to Senior Executives. As AI accelerates development across Amazon, you will both leverage AI to enhance our audit capabilities and assess the security controls governing its use. This role requires technical depth coupled with the ability to operate independently and as part of highly-skilled teams. In this role, you will leverage your skills in vulnerability assessment, exploitation, penetration testing, and red teaming to identify and mitigate risks. Your work will span source code analysis, network penetration, and application exploitation. You will design, implement, and execute methodologies for security assessments of critical Amazon systems. You will be exposed to the full breadth of technology used across Amazon and its subsidiaries, influence security architectures, and communicate risks to Senior Executives. As AI accelerates development across Amazon, you will both leverage AI to enhance our audit capabilities and assess the security controls governing its use. This role requires technical depth coupled with the ability to operate independently and as part of highly-skilled teams. Key job responsibilities * Lead independent security audits of Amazon systems, services, and infrastructure to assess whether security controls are effective * Identify security risks through penetration testing, design reviews, threat modeling, and code analysis * Investigate security control failures — determine why preventive or corrective controls didn't work, and drive root-cause resolution across team boundaries * Assess security controls around Amazon's adoption of AI/ML technologies — including model access, training data protection, output integrity, and integration into development workflows — to ensure they result in secure customer experiences * Build reusable security frameworks, runbooks, and rubrics that enable the team to assess new problem domains repeatably and at scale * Communicate security risk findings and recommendations clearly to technical teams and senior leadership About the team Our security team executes independent assessments of the efficacy of Amazon's layered security controls. We prioritize security assessments of systems and processes that may impact foundational technologies, human safety, privacy and durability of customer data, and financial systems. We believe active tests are required to assess complex environments and emphasize custom tooling to enable safe operation at scale. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP - Experience with AWS products and services - Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++ - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, MA, Virtual Location - Massachuset - 159,300.00 - 202,400.00 USD annually USA, OR, Virtual Location - Oregon - 159,300.00 - 202,400.00 USD annually USA, WA, Virtual Location - Washington - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II at Amazon.com Services LLC. Skills: Security engineering, Vulnerability assessment, Penetration testing, AI security. Lead security audits. Assess security controls", "postedDate" : "2026-06-13T14:37:49.213", "createdAt" : "2026-06-13T14:37:49.213", "lastUpdated" : "2026-06-15T05:49:51.627", "ingestTimestamp" : "2026-06-13T14:37:49.213", "mongoId" : "6a25145a74d8ee00a00bb513", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441020/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security code review", "Systems troubleshooting", "Log analysis", "Task automation", "Operate independently", "Security engineering", "Vulnerability assessment", "Penetration testing", "AI security", "Exploitation", "Red teaming", "Source code analysis", "Network penetration", "Application exploitation", "Security assessments", "Security architectures", "Audit capabilities", "Threat modeling", "Secure coding", "Identity management", "System administration", "Network security", "Software development", "Cryptography", "Cloud-native architecture", "AI/ML security", "Security controls" ], "skillCount" : 27, "jobCategory" : "operations", "dataQualityScore" : 1.0, "_score" : 1067.0194, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false }, { "id" : "6a2c91ad74d8ee00a0983bc6", "title" : "Cyber Security Specialist - L2", "company" : "Global Relay", "industry" : "Cybersecurity", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cyber Security Specialist in London, UK, adjusted for the technology industry and full-time employment." }, "location" : "London, England, United Kingdom", "locations" : [ "London", "England", "United Kingdom" ], "timestamp" : "2026-06-15T10:15:30.538", "fingerprint" : "62e09d41d3976e6b06c279fecb233445baef5c742d5f9fb19204fd94aabbcb24", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.globalrelay.com/careers/jobs?gh_jid=5727338004", "externalId" : "5727338004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "state" : "England", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, England, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Firewalls, Intrusion detection, Antivirus, Anti-malware, SIEM, Two-factor authentication, Biometric authentication, Server hardening, Network device hardening, Windows servers, Linux servers, Network switches, Network routers, VPNs, DR systems", "professionalSkills" : [ "Root cause analysis", "Incident management", "Problem management", "Change management" ], "hardSkillsList" : [ "Security event analysis", "Data analysis", "Vulnerability detection", "Vulnerability assessment", "Penetration testing", "Log management", "Mobile device control" ], "hardSkills" : [ { "name" : "Security event analysis", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Vulnerability detection", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Log management", "level" : "intermediate" }, { "name" : "Mobile device control", "level" : "intermediate" } ], "majorSkills" : "Security incident response, Security infrastructure maintenance, Security event analysis", "majorSkillsList" : [ "Security incident response", "Security infrastructure maintenance", "Security event analysis" ], "coreResponsibilities" : "Provide second level support, Action escalated security incidents, Action escalated service requests, Review security related events, Assess security related events, Prioritize security related events, Perform audit functions, Perform analysis functions, Evaluate security software, Install security software, Maintain security software, Develop process documentation, Maintain process documentation, Assist security audits, Assist enforcement security policies, Participate security awareness initiatives, Administer firewall rule changes, Administer firewall patches, Administer firewall updates", "teamCollaboration" : "Security team monitoring; Operations/DevOps team members", "domainKnowledge" : "Information security systems; Communication protocols; ITIL framework", "domainList" : [ "information-security-systems", "communication-protocols", "itil-framework" ], "domainSpecificKnowledge" : [ "Information security systems", "Communication protocols", "ITIL framework" ], "toolProficiency" : [ "SIEM tools", "Firewalls", "Ticketing system" ], "communicationSkills" : "Written skills; Documentation skills", "documentationSkills" : "Process documentation", "problemSolvingSkills" : "Problem-solving; Troubleshooting", "specialRequirements" : "Right to work UK", "qualificationsBasic" : "2-5 years experience core security systems, 2-5 years experience core infrastructure, Proven experience analysis security events, Certification security technologies", "qualificationsPreferred" : "Experience using ticketing system", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who we are: For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations. Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It’s a place where you can genuinely make an impact – and be recognized for it. We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers. Your role: The Cyber Security Specialist 2 provides second level response to security threats and vulnerabilities. This position analyzes event logs, system logs, and other data sources to determine the root cause of security events and provide recommendations to resolve the events. This position also designs, plans, implements, and maintains assigned components of Global Relay’s security infrastructure. Your responsibilities: Adhere at all times to separation of duties between your role as a member of the security team that monitors the activities of privileged users, and privileged network and Operations/DevOps team members that use their privileges to resolve incidents and fulfill requests in the production environment Provide second level support by actioning escalated security incidents and service requests in a timely manner Review, assess, and prioritize security related events based on severity and criticality Perform audit and analysis functions on internal and external data sources Evaluate, install, and maintain security related software and tools to ensure best of class monitoring and protection of systems and applications; examples include vulnerability detection, assessment and mitigation tools, penetration testing tools, log management and monitoring tools, in-house developed security applications, intrusion detection and prevention systems, mobile computing device controls, VPNs and DR systems Develop and maintain process documentation Assist with Global Relay security audits Assist with the enforcement of security policies Participate in security awareness initiatives Administer firewall rule changes, patches, and updates aligned with the change management process About you: 2-5 years hands-on experience working with core information security systems such as firewalls, intrusion detection and prevention implementations, antivirus and anti-malware solutions, SIEM solutions, two-factor and biometric authentication solutions, and server and network device hardening 2-5 years of hands-on experience working with core infrastructure and networking components such as Windows and Linux servers, L2-L3 network switches and routers Proven experience performing analysis of security events to determine root cause and provide resolution Certification in security technologies such as SIEM tools, firewalls, networking, etc. Excellent understanding of a wide variety of communication protocols Experience using an internal and external ticketing system for ITIL-based incident, problem and change management Previous experience in troubleshooting day-to-day operational processes such as report generation, data verification, data correlation, etc. Excellent verbal, written and documentation skills Methodical and creative approach to problem-solving Superior time management and prioritizing ability Global Relay is unable to offer visa sponsorship for this position. Candidates must have the right to work in the UK at the time of application. What you can expect: At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills. Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion. We seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual. To learn more about our business, culture, and community involvement, visit www.globalrelay.com.", "summaryDescription" : "Cyber Security Specialist - L2 at Global Relay. Skills: Security incident response, Security infrastructure maintenance, Security event analysis. Provide second level support. Action escalated security incidents", "postedDate" : "2026-06-14T08:48:51.475", "createdAt" : "2026-06-14T08:48:51.475", "lastUpdated" : "2026-06-15T10:15:30.538", "ingestTimestamp" : "2026-06-14T08:48:51.475", "mongoId" : "6a2c91ad74d8ee00a0983bc6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Security event analysis", "Data analysis", "Vulnerability detection", "Vulnerability assessment", "Penetration testing", "Log management", "Mobile device control", "Security incident response", "Security infrastructure maintenance", "Root cause analysis", "Incident management", "Problem management", "Change management", "Information security systems", "Communication protocols", "ITIL framework", "SIEM tools", "Firewalls", "Ticketing system" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1063.5414, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e43bf8b1b0376634c922", "title" : "Customer Incident Response Program Manager", "company" : "Amazon Information Service", "industry" : "Project/Program/Product Management--Non-Tech, Program Management, Cloud Computing", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Manager in the Technology industry in Shanghai, China, adjusted for company size and specific role." }, "location" : "Shanghai, CHN", "locations" : [ "Shanghai, CHN" ], "certifications" : [ "Program or Project Management Professional Certification", "AWS certifications" ], "timestamp" : "2026-06-15T04:15:54.586", "fingerprint" : "0bc8f5195ef5bedf99b540884b8f2e95e0d85ed791a728e672725e3c046681c4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071459/apply", "externalId" : "1259a4c9-cf3d-4dad-ac7f-ee57866350a4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Shanghai", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "31.2312707,121.4700152" } ], "locationText" : "Shanghai, China", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "AWS, Generative AI", "professionalSkills" : [ "Security assessment", "Controls design" ], "hardSkillsList" : [ "Incident response", "Security operations" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Program management, Security", "majorSkillsList" : [ "Incident response", "Program management", "Security" ], "coreResponsibilities" : "Manage a portfolio of critical security offerings, Manage a portfolio of critical security services, Build training programs for users, Deploy training programs for users, Brief customers on AWS CIRT, Brief customers on AWS Security Incident Response service, Prioritize risk for service teams, Prioritize risk for security teams, Prioritize risk for executive leadership, Collaborate with business teams, Collaborate with service teams, Understand security assessment scope, Confirm security assessment scope, Understand controls design, Confirm controls design", "teamCollaboration" : "Cross-functional teams; Senior leadership; Security engineers; Service teams", "projectManagementSkills" : [ "Program management", "Project management", "Roadmap management", "Strategic planning" ], "domainKnowledge" : "Cloud security; Incident response; Security operations", "domainList" : [ "cloud-security", "incident-response", "security-operations" ], "domainSpecificKnowledge" : [ "Cloud security", "Incident response", "Security operations" ], "communicationSkills" : "Executive level communication", "innovationCreativity" : "Pioneer security solutions", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "8+ years program management experience, Experience using data and metrics, Experience owning program strategy, 5+ years Program or Project Management experience in Security domain, Experience managing enterprise-level projects, Experience managing continuous improvement programs", "qualificationsPreferred" : "2+ years driving process improvements, Master's degree or MBA, Experience owning cross-team security implementation programs, Experience driving operational security programs, Experience driving secure software development lifecycle programs, Experience working in security operations environment, Active project management certification, Agile management certification, AWS experience, AWS certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale incident response solutions in the cloud? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Service Security (GSS) you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Within this team, AWS CIRT is seeking a self-motivated leader with rich experience in customer service and interested in improving the way products are brought to market and distributed on a global scale to join us as a Program Manager for China. AWS CIRT is looking for a skilled and motivated senior Program Manager to expand the security program that responds to customer security incidents at scale. You will manage the roadmap and apply strong judgement that balances immediate security campaigns with longer-term, strategic planning. This role is inherently cross-functional, working closely with senior leadership, security engineers, and dozens of service teams. A successful candidate will have a good mix of deep technical security knowledge and a demonstrated track record of successful complex and large scale program/project deliveries. Key job responsibilities • A proven track record of implementing, delivering large projects and communicating effectively at executive level • Manage a portfolio of critical security offerings and services that are internal and external facing • Excellent program and project management skills, with the ability to work in a fast-paced environment • Effective prioritization of tasks, and seamless operation across organizational boundaries • Building and deploying training programs for all users in the Greater China Region • Brief customers on AWS CIRT and AWS Security Incident Response service • Continuously prioritize risk for service teams, security teams, and executive leadership • Collaborate with business/service teams to understand and confirm security assessment scope and controls design About the team This role will be to join the AWS Customer Incident Response Team (CIRT) aka Zipline - https://w.amazon.com/bin/view/AWS/Teams/GlobalServicesSecurity/TDIR/Zipline Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 8+ years of program or project management experience - Experience using data and metrics to determine and drive improvements - Experience owning program strategy, end to end delivery, and communicating results to senior leadership - 5+ years of Program or Project Management experience managing enterprise-level projects and continuous improvement programs in the Security domain. - Program or Project Management Professional Certification Preferred Qualifications: - 2+ years of driving process improvements experience - Master's degree, or MBA in business, operations, human resources, adult education, organizational development, instructional design or related field - Experience in owning cross-team security implementation programs inclusive of metrics, communications and prioritization. - Experience driving operational security and secure software development lifecycle programs. - Experience working in a security operations environment. - Have at least one active project or agile management certification. - AWS experience and/or relevant certifications. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Customer Incident Response Program Manager at Amazon Information Service. Skills: Incident response, Program management, Security. Manage a portfolio of critical security offerings. Manage a portfolio of critical security services", "postedDate" : "2026-06-13T10:08:25.455", "createdAt" : "2026-06-13T10:08:25.455", "lastUpdated" : "2026-06-15T04:15:54.586", "ingestTimestamp" : "2026-06-13T10:08:25.455", "mongoId" : "68c2e43bf8b1b0376634c922", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071459/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Security operations", "Leadership", "Program management", "Security", "Security assessment", "Controls design", "Project management", "Roadmap management", "Strategic planning", "Cloud security", "Program or Project Management Professional Certification", "AWS certifications" ], "skillCount" : 13, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 1062.4739, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2c6ae374d8ee00a090ee19", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T11:31:26.144", "fingerprint" : "036fe461d5c32bde966d19674ee2896db18ea68e5c02dfd07b4ff5eed08ab41f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=4994052008", "externalId" : "4994052008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Implement Zero Trust, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture proactively, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Review technical designs, Triage security bugs, Recommend solutions for security bugs, Participate in Red-Teaming exercises, Participate in Blue Teaming exercises, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Participate in RFI's, Evaluate new security solutions, Conduct POCs, Demonstrate POVs, Implement anti-abuse solutions, Apply AI tools for anomaly detection, Apply AI tools for insider threat detection, Apply AI tools for incident response", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Cyber Security; Infrastructure security; Network security; Endpoint security; Zero Trust; Cloud security; AI risk; AI threat modeling; LLM components", "domainList" : [ "cyber-security", "infrastructure-security", "network-security", "endpoint-security", "zero-trust", "cloud-security", "ai-risk", "ai-threat-modeling", "llm-components" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "Network security", "Endpoint security", "Zero Trust", "Cloud security", "AI risk", "AI threat modeling", "LLM components" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "communicationSkills" : "Articulate security concepts", "continuousLearning" : "Learning about new security products; Learning about new security features; Learning about new security strategies", "innovationCreativity" : "Hackathon", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Root cause analysis", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Implement Zero Trust", "postedDate" : "2026-06-14T03:22:32.536", "createdAt" : "2026-06-14T03:22:32.536", "lastUpdated" : "2026-06-15T11:31:26.144", "ingestTimestamp" : "2026-06-14T03:22:32.536", "mongoId" : "6a2c6ae374d8ee00a090ee19", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Agile", "Cyber Security", "AI risk", "AI threat modeling", "LLM components", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1051.2593, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69d5e4972beec4dd3d931a94", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T01:59:48.176", "fingerprint" : "0ec424e9d2b35a133660b95692851a41677cd191ce06dcc34f0740d1755687ea", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10384824/apply", "externalId" : "07995b8f-98eb-495e-8b78-1e1267149e43", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software development, Automation, AWS services", "majorSkillsList" : [ "Security software development", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network environment; Security response", "domainList" : [ "aws-security", "corporate-network-environment", "security-response" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network environment", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Impact engineer productivity; Enhance productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software development, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T02:52:31.356", "createdAt" : "2026-06-13T02:52:31.356", "lastUpdated" : "2026-06-15T01:59:48.176", "ingestTimestamp" : "2026-06-13T02:52:31.356", "mongoId" : "69d5e4972beec4dd3d931a94", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10384824/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software development", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network environment" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1047.9655, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69d5e4952beec4dd3d931852", "title" : "Security Engineer", "company" : "Amazon Corporate Services Pty Ltd", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Melbourne, Australia, adjusted for the technology industry and company size." }, "location" : "Melbourne, Victoria, AUS", "locations" : [ "Melbourne, Victoria, AUS" ], "timestamp" : "2026-06-15T04:19:18.986", "fingerprint" : "dab9db3012eef4edafb4c8629222dceda575403ca777c09ae42111e3f91df9de", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385605/apply", "externalId" : "84707739-f0cd-402e-872d-51f4bfd5a98f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Melbourne", "state" : "Victoria", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-37.8142454,144.9631732" } ], "locationText" : "Melbourne, Victoria, Australia", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, HTTP, DNS, TCP/IP, Cryptography, Application Security", "professionalSkills" : [ "Security operations", "Threat hunting", "Incident management", "Security monitoring", "Threat analysis", "Security data", "Security measures", "Security controls" ], "hardSkillsList" : [ "SIEM tuning", "Detection development", "Threat intelligence analysis", "Security automation", "Vulnerability remediation", "System hardening" ], "softSkillsList" : [ "Bias for Action", "Earn Trust" ], "hardSkills" : [ { "name" : "SIEM tuning", "level" : "intermediate" }, { "name" : "Detection development", "level" : "intermediate" }, { "name" : "Threat intelligence analysis", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Vulnerability remediation", "level" : "intermediate" }, { "name" : "System hardening", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Bias for Action" }, { "name" : "Earn Trust" } ], "majorSkills" : "Security Engineering, Incident Response, Threat Detection, SIEM", "majorSkillsList" : [ "Security Engineering", "Incident Response", "Threat Detection", "SIEM" ], "coreResponsibilities" : "Perform security event monitoring, Perform incident management, Perform incident response, Develop SIEM detections, Tune SIEM detections, Maintain SIEM detections, Develop SIEM dashboards, Tune SIEM dashboards, Maintain SIEM dashboards, Develop SIEM correlation rules, Tune SIEM correlation rules, Maintain SIEM correlation rules, Conduct proactive threat hunting, Conduct threat analysis, Identify suspicious behaviour, Investigate security alerts, Respond to security alerts, Escalate security alerts, Investigate security incidents, Respond to security incidents, Escalate security incidents, Support SIEM integration, Optimize SIEM integration, Support security data integration, Optimize security data integration, Contribute to SOC process improvement, Contribute to SOC automation initiatives, Author SOC SOPs, Author SOC runbooks, Apply MITRE ATT&CK, Apply NIST frameworks, Apply ISM, Apply PSPF, Perform on-call duties", "teamCollaboration" : "Work with security team; Collaborate with IT teams; Collaborate with network teams; Collaborate with application teams", "projectManagementSkills" : [ "Continuous improvement" ], "domainKnowledge" : "Australian Government security requirements; Protective Security Policy Framework; Information Security Manual; MITRE ATT&CK; NIST", "domainList" : [ "australian-government-security-requirements", "protective-security-policy-framework", "information-security-manual", "mitre-att-ck", "nist" ], "domainSpecificKnowledge" : [ "Australian Government security requirements", "Protective Security Policy Framework", "Information Security Manual", "MITRE ATT&CK", "NIST" ], "toolProficiency" : [ "Splunk", "Microsoft Sentinel", "Sumo Logic" ], "communicationSkills" : "Generate metrics; Generate dashboards; Executive reports", "documentationSkills" : "Authoring runbooks; Authoring SOPs", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "specialRequirements" : "Australian citizens, Hold or eligible for security clearance, Complete Organisational Suitability Assessment, On-call duties", "outcomesObjectives" : "Ensure security and integrity; Implement robust security measures; Remediate identified vulnerabilities; Coordinate security patches; Coordinate system hardening; Provide security guidance; Ensure proper implementation of controls; Create security performance indicators; Build real-time dashboards", "qualificationsBasic" : "Australian citizens, Hold or eligible for security clearance, 3+ years SOC Analyst experience, 3+ years Defensive Cyber Role experience, Experience with SIEM tools, Experience with incident response, Experience with threat detection, Experience with security monitoring", "qualificationsPreferred" : "Working knowledge of foundational systems, Working knowledge of key security domains", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance, with the ability to successfully complete an Organisational Suitability Assessment. For more information regarding security clearances please visit (https://www.agsva.gov.au/) Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure. AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Key job responsibilities Key responsibilities may include: • Performing security event monitoring, incident management and response. • Develop, tune, and maintain SIEM detections, dashboards, and correlation rules • Conduct proactive threat hunting and analysis to identify suspicious behaviour • Investigate, respond and be the escalation point for security alerts and incidents • Support the integration and optimisation of security data sources within SIEM platforms • Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP’s and runbooks. • Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations. • Perform on-call duties as required, out of business hours. Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at https://www.agsva.gov.au/ A day in the life A typical day for a Security Engineer may involve Responding to new detections: Monitor security alerts in real-time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed. Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment. Threat hunt: Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage. Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components. Generate metrics and dashboards: Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive-level reports summarizing security posture and trends, and build real-time dashboards for continuous monitoring of security operations effectiveness. About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no \"perfect\" security solutions and we develop and iterate using a continuous improvement process. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years experience as a SOC Analyst or Defensive Cyber Role. - Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar). - Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments. Preferred Qualifications: - Good working knowledge of foundational systems and protocols e.g HTTP, DNS, TCP/IP. - Strong technical working knowledge of key security domains, e.g Cryptography, Identity & Access Management and Application Security. Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer at Amazon Corporate Services Pty Ltd. Skills: Security Engineering, Incident Response, Threat Detection, SIEM. Perform security event monitoring. Perform incident management", "postedDate" : "2026-06-13T12:59:33.903", "createdAt" : "2026-06-13T12:59:33.903", "lastUpdated" : "2026-06-15T04:19:18.986", "ingestTimestamp" : "2026-06-13T12:59:33.903", "mongoId" : "69d5e4952beec4dd3d931852", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385605/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "SIEM tuning", "Detection development", "Threat intelligence analysis", "Security automation", "Vulnerability remediation", "System hardening", "Bias for Action", "Earn Trust", "Security Engineering", "Incident Response", "Threat Detection", "SIEM", "Security operations", "Threat hunting", "Incident management", "Security monitoring", "Threat analysis", "Security data", "Security measures", "Security controls", "Continuous improvement", "Australian Government security requirements", "Protective Security Policy Framework", "Information Security Manual", "MITRE ATT&CK", "NIST", "Splunk", "Microsoft Sentinel", "Sumo Logic" ], "skillCount" : 29, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1047.4951, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 102753, "totalPages" : 2056, "hasNext" : true, "hasPrevious" : false } }

Security Engineer Ii Security Incident Response Team Sirt Jobs in Toronto

Security Engineer II, Security Incident Response Team (SIRT)

Security Incident Response Manager

Senior Security Engineer, AWS Security Incident Response

Senior Security Incident Response Engineer

Senior Incident Response Specialist, Cyber Security

Security Engineer, AWS Security Incident Response

Security Engineer, Detection and Response

Security Engineer, Incident Response, CorpSec

AWS Security Operations/Incident Response Engineer

Security Operations and Incident Response Manager

[8NW] Senior SecOps Incident Response Automation Engineer

Security Engineer, Detection and Response

Security Incident Response Lead

Security Specialist II

AWS Security Operations/Incident Response Engineer

Senior Incident Response Engineer, Devices & Services Security

Security Engineer II

Security & Compliance Engineer II

Security Engineer II

Senior Security Operations Analyst

Security Guard

Senior Security Architect (m/f/d)

Security Engineer, AWS Global Services

Security Intelligence Engineer

Security Officer II

Sr. Security Engineer, AWS Cloud Security Response

Security Engineer II, Differentiated Security Team (DST)

Security Software Dev Engineer II, AWS Security Corporate Response

Senior Security Engineer

Security Engineer II

Senior Cyber Security Specialist

Senior Cyber Security Specialist

Security Analyst (Cyber Defense Analyst)

Security Software Dev Engineer II, AWS Security Corporate Response

Security Operation

Senior Security Operations & Vulnerability Management Engineer

Security Operation

Lead IT Security Analyst

Lead IT Security Analyst

Software Engineer II, Security Engineering (Auth0)

Security Engineer II

Security Engineer

Senior Security Engineer

Security Engineer

Security Engineer II

Cyber Security Specialist - L2

Customer Incident Response Program Manager

Senior Security Engineer

Security Software Dev Engineer II, AWS Security Corporate Response

Security Engineer

Common Questions