ZipRecruiter

Log In

1

On Call Aws Security Jobs (NOW HIRING)

Brinc Drones Inc

Cloud Security Engineer

Seattle, WA · On-site

$114K - $205K/yr

Conduct a full AWS security posture assessment - IAM, S3 bucket policies, VPC security groups ... Own SIEM selection and deployment; configure alerting and on-call * Implement phishing-resistant ...

Uvation

Network Security Engineer

$107K - $146K/yr

Support cloud security initiatives across AWS, Azure, and hybrid infrastructure * Configure and ... Participate in on-call rotations and critical incident handling Required Skills & Technologies ...

DISQO

Senior Security Engineer

Los Angeles, CA · On-site

$123K - $169K/yr

Responsibilities : • Own the security posture of our AWS environment: IAM, networking, encryption ... on-call playbooks, and tabletop exercises that keep the team sharp. • Use AI coding agents ...

DISQO

Senior Security Engineer

Los Angeles, CA · On-site

$123K - $169K/yr

Responsibilities : • Own the security posture of our AWS environment: IAM, networking, encryption ... on-call playbooks, and tabletop exercises that keep the team sharp. • Use AI coding agents ...

next page

Showing results 1-20

All JobsOn Call Aws Security Jobs

On Call Aws Security information

See salary details

$11

$19

$25

How much do on call aws security jobs pay per hour?

As of Jun 15, 2026, the average hourly pay for on call aws security in the United States is $19.03, according to ZipRecruiter salary data. Most workers in this role earn between $15.38 and $18.75 per hour, depending on experience, location, and employer.
What are the most commonly searched types of Aws Security jobs? The most popular types of Aws Security jobs are:
On Call Aws Security jobs near you
SOC Analyst 2 - Secret Clearance (2 positions) with Security Clearance

SOC Analyst 2 - Secret Clearance (2 positions) with Security Clearance

Zachary Piper Solutions, LLC

King, NC • On-site

Other

This job post has expired today. Applications are no longer accepted.

Job description

Cisco Confidential SIEM Engineer (Splunk, Detection Focus) Location: RTP or Fulton MD Experience Level: Minimum 5 Years Department: GTTS Security Operations Schedule: Full-time; this role operates within a 24/7 Security Operations Center (SOC) and requires mandatory participation in an on-call rotation to ensure continuous security coverage. Role Overview We are seeking a proactive SIEM Engineer with a strong focus on Splunk engineering, detection development, and cloud security operations. This role will support the organization's security monitoring and incident response capabilities by leveraging Splunk Enterprise Security (ES), Splunk SOAR, and integrated cloud/security platforms across AWS and Azure environments.

The ideal candidate will contribute to the development and optimization of detections, dashboards, automation workflows, and data onboarding initiatives while assisting with troubleshooting and maintaining distributed Splunk environments. This individual will work closely with SOC analysts, cloud teams, and engineering stakeholders to improve security visibility, operational eJiciency, and threat detection capabilities. This position requires a blend of security operations experience and hands-on Splunk engineering skills, including data normalization, ingestion troubleshooting, search optimization, and security analytics development.

The candidate should be comfortable operating in a fast-paced 24/7 security environment, participating in on-call rotations, and supporting continuous improvement initiatives across the security operations program. Role Responsibilities Splunk Engineering & Analytics: • Develop, maintain, and optimize Splunk Enterprise Security (ES) detections, dashboards, and correlation searches • Support Splunk SOAR playbook development and automation workflows • Assist with onboarding, parsing, normalization, and enrichment of security data sources into Splunk • Troubleshoot Splunk ingestion pipelines, forwarder connectivity, search performance, and indexing issues • Create and maintain knowledge objects including field extractions, lookups, event types, tags, and macros Cisco Confidential • Assist with Splunk configuration changes and troubleshooting across distributed Splunk environments • Leverage data models and accelerated searches to improve detection and reporting performance • Collaborate with SOC analysts and engineering teams to improve visibility, detection coverage, and operational efficiency Incident Response & Operations: • Incident response efforts, conducting deep-dive investigations into alerts generated by our security stack. • Coordinate with internal teams to contain and remediate threats.

• Participate in a scheduled on-call rotation to ensure 24/7 incident coverage and rapid response. Required Qualifications • Experience: Minimum of 5 years of professional experience in a SIEM Engineering, Security Operations or Incident Response environment. • Splunk Proficiency: Demonstrated ability to write complex SPL queries, build/maintain production-grade dashboards, and perform data normalization within Splunk Enterprise or Splunk Enterprise Security (ES).

• Technical Skills: o Experience onboarding and integrating security data sources into Splunk. o Experience integrating security tools (e.g., AWS Security Hub) into a centralized SIEM. o Understanding of Splunk knowledge objects, field extractions, lookups, and CIM normalization.

• Operational Mindset: Ability to handle high-pressure incident response scenarios and a willingness to participate in an on-call rotation. • Communication: Proven ability to present technical findings and dashboard insights to both technical and non-technical stakeholders. Preferred Qualifications • Splunk Enterprise Security (ES) Certified Admin and/or Splunk Core Certified Power User.

• Security+ or equivalent • Certifications such as GCIH, GCIA, or Azure/AWS Security certifications. • Experience in a multi-cloud environment (AWS/Azure) specifically focusing on identity and access management (Entra ID).

Apply