Security Engineer II - AI-Powered Detection & Monitoring

Amazon; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs (Restricted Stock Units)

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Healthcare Security is hiring a Security Engineer II to design, build, and operate detection and monitoring capabilities across cloud, applications, endpoints, and AI-powered systems. You will work at the intersection of detection engineering and security operations, building detection-as-code pipelines and automated response workflows.

You will partner with engineering and incident response teams to ensure HIPAA compliance, scale detection using AI/LLM tooling, and improve visibility

Qualifications

• 5+ years of security-related professional experience.
• Bachelor's degree in STEM or 2+ years IT Security experience.
• Experience with cloud hosting technologies (AWS, Azure).
• Experience with log aggregation and analysis tools (Splunk, OpenSearch, ELK, Datadog).
• Experience with threat modeling or risk identification techniques.

Responsibilities

• Design, build, and maintain detection and monitoring capabilities across cloud infrastructure, SaaS apps, endpoints, and identity systems.
• Develop detections and monitoring for AI services and agentic applications, including anomaly detection for LLM-powered tools.
• Build automated investigation and response workflows to replace manual runbooks.
• Develop AI/LLM-powered tooling to accelerate investigations and reduce alert fatigue.
• Monitor telemetry, alerts, and dashboards for early signals of degradation or compromise.

Skills

Security engineering

Cloud security

Threat modeling

Automation

Incident response

Education

Bachelor's degree in STEM or 2+ years IT Security

Tools

Splunk/OpenSearch/ELK

Datadog

SentinelOne/CrowdStrike

Kubernetes/Docker

Job description

Amazon Healthcare Security is hiring a Security Engineer II to design, build, and operate detection and monitoring capabilities across cloud, applications, endpoints, and AI-powered systems. You will work at the intersection of detection engineering and security operations, building detection-as-code pipelines and automated response workflows.

You will partner with engineering and incident response teams to ensure HIPAA compliance, scale detection using AI/LLM tooling, and improve visibility