Cloud Security Engineer: AI-Driven Incident Response Lead

VulnU; Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Paid parental leave

Flexible PTO

Equity

Amazon Employee Discount

Job summary

Amazon is seeking a Security Engineer II for AWS Security Corporate Response in Melbourne. You will lead end-to-end Sev2 investigations and shape autonomous, AI-augmented security processes.

You’ll design guardrails, author stories for agents, and build scalable automation while collaborating with a global on-call team. The ideal candidate has security operations, incident response, malware analysis experience, and strong Python scripting.

Qualifications

• Bachelor's degree in CS or equivalent.
• Experience in security operations, incident response, or security engineering.
• Hands-on experience investigating security incidents (malware analysis, phishing response, credential compromise, or network intrusion).
• Proficiency in Python or similar scripting language for security automation.
• Experience with log analysis platforms (Splunk, ELK) and EDR tools (CrowdStrike, Carbon Black).
• Knowledge of networking protocols and OS internals; Windows and Linux.

Responsibilities

• Lead Sev2 security investigations end-to-end: acknowledge, investigate deeply, document, and own resolution.
• Triage Sev2 candidates and escalate decisively with justification.
• Analyze open source threat intelligence and validate indicators quickly.
• Author and validate agent investigation user stories; ensure AI investigations meet quality standards.
• Design guardrails and policies; consider attacker evasion and edge-case failures.
• Build detection rules and automation scripts; scale into agentic capabilities.
• Participate in a global on-call rotation and maintain readiness.

Skills

Python

Threat investigation

Cloud security

EDR tools

Log analysis

AI/LLM automation

AWS security

Education

Bachelor's degree in Computer Science or equivalent

Tools

Splunk

ELK

CrowdStrike

Carbon Black

YARA

Sigma

Job description

Amazon is seeking a Security Engineer II for AWS Security Corporate Response in Melbourne. You will lead end-to-end Sev2 investigations and shape autonomous, AI-augmented security processes.

You’ll design guardrails, author stories for agents, and build scalable automation while collaborating with a global on-call team. The ideal candidate has security operations, incident response, malware analysis experience, and strong Python scripting.