Security Incident Response, Security Engineer, US Amazon Dedicated Cloud Security
Core
Detect, investigate, and respond to threats on a fully air-gapped, classified AI Factory platform for a U.S. Government program.
Role type
Senior Security Incident Response Analyst (SOC)
Builds
Detection content, response playbooks, and incident response capabilities for a classified system.
Domain
Government / Classified AI Infrastructure / Cybersecurity
Required skills
Security telemetry monitoring, incident triage, incident response lifecycle management, scripting/programming, security code review, networking fundamentals, database knowledge, OS knowledge (Unix, Linux, Windows)
Preferred skills
Confidential environment experience, U.S. Government incident-reporting knowledge
Technologies
Security telemetry platforms, scripting languages, SIEM tools (implied by telemetry/alerts)
Responsibilities
Monitor security telemetry and triage alerts on the disconnected platform. Drive incidents through containment, eradication, and recovery. Develop and tune detection content and response playbooks. Coordinate incident reporting with ISSM and Government counterparts.