Network Security Engineer, ADC Security

As a Network Security Engineer for AWS, you will improve identity outcomes across the network by strengthening detection, accelerating incident triage, and scaling detection automation.

Responsibilities

• Author, tune, and maintain network detection content to achieve high-fidelity coverage with low false-positive rates
• Triage, investigate, and drive security incidents to resolution across the operational network
• Build and operate detection-as-code pipelines, including IDS/IPS and syslog-based rule engines
• Use AI/ML-powered anomaly detection to automate and improve alert prioritization for triage
• Integrate threat intelligence and perform forensic and root-cause analysis
• Establish and track operational metrics for detection coverage, on-call health, and incident response readiness
• Partner with Infrastructure Security teams to close detection gaps and reduce mean-time-to-detect and mean-time-to-respond

Requirements

• Bachelor’s degree (or one of: CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, PenTest+)
• 3+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools
• Knowledge of networking protocols including HTTP(S), DNS, and TCP/IP
• Current, active US Government Security Clearance for TS/SCI with polygraph
• US Citizenship

Technologies

• IDS/IPS
• Syslog
• AI/ML
• HTTP(S)
• DNS
• TCP/IP

A Day in the Life

• Review overnight alerts from IDS/IPS and syslog rule engines, separate signal from noise, and open investigations for anomalies flagged by ML models
• Pull network telemetry and forensic data to determine root cause, then drive the incident through to resolution
• Tune noisy detection logic as code, deploy it through the pipeline, and integrate a new threat-intelligence feed
• Update detection-coverage metrics and partner with an Infrastructure Security team to close a gap, supporting a classified network continuously

Preferred Qualifications

• Experience applying threat modeling or other risk identification techniques (or equivalent)
• Experience with security in service-oriented architectures / microservices and web services

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D, with option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line)
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Location: Herndon, VA (onsite)

Compensation: USD 159,300 - 202,400 per yearly