AI-Driven Security Incident Response Engineer

VulnU; Melbourne; Presencial; AUD 150.000 - 230.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Paid parental leave

Retirement match

Equity

Flexible PTO

Descripción de la vacante

Amazon's AWS Corporate Security Response team in Melbourne is seeking a Security Incident Response Engineer. You will lead end-to-end investigations, analyze malware campaigns, phishing, and credential compromise while shaping autonomous investigation tooling.

Hands-on detection engineering and automation are core to this role in a global security-first environment. The role emphasizes building scalable incident response capabilities, collaborating with cross-functional teams, and operating in a

Formación

• Bachelor's degree in computer science or equivalent, or experience in IT Security
• Hands-on experience investigating security incidents (malware analysis, phishing response, credential compromise, or network intrusion)
• Proficiency in Python or similar scripting language for security automation and tooling
• Experience with log analysis platforms (Splunk, ELK, or equivalent) and EDR tools (CrowdStrike, Carbon Black, or equivalent)
• Knowledge of networking protocols (HTTP, DNS, TCP/IP) and operating system internals (Windows and Linux)
• Experience performing detection engineering in a dedicated or hybrid capacity supporting incident response and threat intelligence operations
• Experience designing or validating AI/LLM-powered automation in a security context
• Experience with threat intelligence platforms and IOC enrichment (VirusTotal, MITRE ATT&CK framework)
• Track record of building security automation that measurably reduced manual operational burden

Responsabilidades

• Lead High Severity security investigations end-to-end: acknowledge, investigate with depth, document as you go, and own through resolution
• Triage High Severity candidates — promote decisively when indicators are clear, downgrade with documented rationale when they're not
• Analyze open source threat intelligence — these reports contain temporal IOCs that decay with age, making rapid validation and proactive blocking critical
• Author and validate agent investigation user stories, ensuring autonomous investigations match human-quality rigor
• Design and test guardrails and policies — think about how attackers would evade detection, how edge cases produce incorrect results, and how agents might fail
• Build tactical scripts, detection rules, and response automations that address immediate operational gaps — then drive their transition into scalable agentic capabilities
• Participate in a global on-call rotation: own the queue for your shift, monitor operational health, and maintain readiness
• Execute clean shift handoffs: document active investigations, flag anomalies observed during your shift, and explicitly transfer ticket ownership

Conocimientos

Python scripting

Security operations

Incident response

Threat intelligence

AI/LLM automation

Networking knowledge

Windows/Linux internals

EDR tools

Log analysis

Educación

Bachelor's degree in CS or IT Security

Herramientas

Splunk

ELK

CrowdStrike

Carbon Black

Descripción del empleo

Amazon's AWS Corporate Security Response team in Melbourne is seeking a Security Incident Response Engineer. You will lead end-to-end investigations, analyze malware campaigns, phishing, and credential compromise while shaping autonomous investigation tooling.

Hands-on detection engineering and automation are core to this role in a global security-first environment. The role emphasizes building scalable incident response capabilities, collaborating with cross-functional teams, and operating in a