← All roles

Security Engineer II, AWS Security Corporate Response

Amazon· Systems, Quality, & Security Engineering
Apply on company site
Hybrid (Melbourne)Full-timePosted yesterday

About the role

Security Engineer in AWS Corporate Security Response focusing on incident response and AI-assisted automation at massive scale. Lead end-to-end security investigations, develop automation, and shape autonomous investigation capabilities across Amazon’s corporate infrastructure.

Responsibilities

  • Lead Sev2 security investigations end-to-end: acknowledge, investigate with depth (not speed), document as you go, and own through resolution
  • Triage Sev2 candidates — promote decisively when indicators are clear, downgrade with documented rationale when they're not
  • Analyze open source threat intelligence — these reports contain temporal IOCs that decay with age, making rapid validation and proactive blocking critical
  • Author and validate agent investigation user stories, ensuring autonomous investigations match human-quality rigor
  • Design and test guardrails and policies — think about how attackers would evade detection, how edge cases produce incorrect results, and how agents might fail in ways developers didn't anticipate
  • Build tactical scripts, detection rules, and response automations that address immediate operational gaps — then drive their transition into scalable agentic capabilities
  • Participate in a global on-call rotation: own the queue for your shift, monitor operational health, and maintain readiness
  • Execute clean shift handoffs: document active investigations, flag anomalies observed during your shift, and explicitly transfer ticket ownership

Qualifications

  • Bachelor's degree in computer science or equivalent, or experience in IT Security
  • Experience in security operations, incident response, or security engineering
  • Hands-on experience investigating security incidents (malware analysis, phishing response, credential compromise, or network intrusion)
  • Proficiency in Python or similar scripting language for security automation and tooling
  • Experience with log analysis platforms (Splunk, ELK, or equivalent) and EDR tools (CrowdStrike, Carbon Black, or equivalent)
  • Knowledge of networking protocols (HTTP, DNS, TCP/IP) and operating system internals (Windows and Linux)

Skills

Required:PythonSecurity Incident InvestigationLog AnalysisEDR Tools

Benefits

  • Inclusive Team Culture
  • Work-Life Balance
  • Growth and Impact
Last updated Oct 25, 2026. Interested? Apply on the company site.

About Amazon

Amazon.com, Inc. or its affiliates

liquid-ai-recruiting-target
Company profileWebsite

More open roles at Amazon