Security Engineer II - AI-Driven Incident Response

Amazon Web Services; Melbourne; On-site; AUD 140,000 - 180,000; Full time

Job summary

Amazon is seeking a Security Engineer II for AWS Security Corporate Response to lead security investigations end-to-end and shape an autonomous investigation platform. You will analyze threats, author user stories for autonomous agents, and build tooling to automate responses at massive scale.

The role combines hands-on incident response with intelligent automation, requiring collaboration across global teams and a strong emphasis on rigorous, human-quality outcomes.

Qualifications

• Bachelor's degree in computer science or equivalent or IT security experience.
• Hands-on experience in security operations, incident response or security engineering.
• Proficiency in Python or similar scripting language for security automation.
• Experience with log analysis platforms (Splunk/ELK) and EDR tools.

Responsibilities

• Lead Sev2 security investigations end-to-end: acknowledge, investigate with depth, document, and own through resolution.
• Triage Sev2 candidates and justify promotions or downgrades with documented rationale.
• Analyze open source threat intelligence and validate indicators quickly for proactive blocking.
• Author and validate agent investigation user stories to match human-quality rigor in automation.
• Design and test guardrails and policies to anticipate attacker methods and edge cases.
• Build detection rules and response automations addressing immediate gaps, scalable thereafter.
• Participate in a global on-call rotation and maintain shift readiness.
• Execute clean shift handoffs with clear documentation and ticket ownership transfers.

Skills

Python scripting

Security automation

Incident response

Threat intelligence

Education

Bachelor's degree in computer science or equivalent

Tools

Splunk

ELK

EDR tools

Job description

Amazon is seeking a Security Engineer II for AWS Security Corporate Response to lead security investigations end-to-end and shape an autonomous investigation platform. You will analyze threats, author user stories for autonomous agents, and build tooling to automate responses at massive scale.

The role combines hands-on incident response with intelligent automation, requiring collaboration across global teams and a strong emphasis on rigorous, human-quality outcomes.