JobsSecurity Incident Response Engineer, Security Posture Improvement and Resilience Engineering
Amazon logo

Security Incident Response Engineer, Security Posture Improvement and Resilience Engineering

Amazon

Location

San Francisco, CA

Type

Full-time

Posted

9/17/2026

Compensation

$159,300 - $212,800 per year

Undergraduate with 2+ Years of Experience
H-1B FY202699.1% approval+9% YoY
👑 Elite sponsor

Job description

Twitch is seeking a Security Incident Response Engineer to join their Security Incident Response Team (SIRT). This role focuses on identifying, managing, and learning from security incidents across Twitch's global platform. The ideal candidate will coordinate responses to emerging security issues and enhance the organization's defenses. If you are passionate about protecting communities and solving complex security challenges, this position may be for you.

Requirements

  • 3+ years of information security and compliance experience, or a Bachelor's degree in computer science, engineering, analytics, mathematics, statistics, IT or equivalent.
  • Automation experience using scripting or programming languages such as Go, Python, Ruby, Shell, or Perl.
  • Ability to securely design and implement AI/ML-driven playbooks to automate common security operations.
  • Experience coordinating responses to security incidents.
  • Knowledge of security issues and threat landscape.
  • Background in cloud, host, network, and application security.
  • Familiarity with common Incident Response frameworks or lifecycle models like NIST-800-61, ISO/IEC 27035.
  • B.S. or M.S. in Computer Science, Computer Engineering, Software Security, or a related technical discipline.
  • Experience and familiarity with streaming and content creation.
  • Experience handling security incidents in a hybrid cloud environment (AWS, GCP) and conducting log dives on cloud telemetry like CloudTrail.

Responsibilities

  • Participate in an on-call rotation that includes peers on the Security Incident Response Team.
  • Qualify reports or alerts of activity as security incidents using clear guidelines.
  • Evaluate the potential and realized impact of security incidents to Twitch.
  • Analyze threat actor tactics, techniques, and procedures.
  • Participate or create information sharing groups and communicate securely.
  • Write and follow clear procedures for accountability and improvement.
  • Communicate with peers and leadership about the timeline of security-related events.
  • Coordinate security incident response activities with affected teams.
  • Investigate, document, and implement detection, enrichment, triage, response, and communication automations.
  • Lead lessons learned discussions and help teams effect change to reduce incident recurrence.

Benefits

  • Employees at Amazon are often offered comprehensive health benefits—including multiple medical plan options (no pre-existing condition exclusions, 100% covered in-network preventive care), dental and vision plans, a 24/7 medical advice line from day one, expert second-opinion services, and broad mental-health support with several free counseling sessions (including pediatric). Financial wellness typically includes a 401(k) with company match (up to 2%), Restricted Stock Units (equity), FSAs, an emergency savings program, product and partner discounts, and even college-savings and home-purchase programs. Overall, the package is designed to support employees and their families’ health, finances, and day-to-day life.

H-1B filing history

Public USCIS petition and DOL LCA counts · latest USCIS FY2026, LCA FY2026

Filing entity: Amazon Com Services Llc

As of Aug 23, 2026

Initial approvals

3,290

FY2026

Approval rate

99.1%

FY2026

LCA certified

32,937

FY2026

Entry-level share

10.6%

FY2026

Initial approvals YoY

+9%

Trend

LCA certified YoY

-44%

Trend

Initial approvals by fiscal year

Approval rate by fiscal year

Continuing vs initial approvals

LCA certified positions by quarter

LCA certified positions by fiscal year

Based on public USCIS and DOL filings; not a sponsorship guarantee.

Is this posting expired or inaccurate?