Security Incident Response Engineer, AWS Security Corporate Response
AI
AWS Corporate Security Response is seeking a Security Incident Response Engineer to lead high-severity security investigations and shape an AI-powered agentic investigation platform. The role combines hands-on incident response with automation, requiring expertise in threat detection, forensics, and scripting. Based in Melbourne with a hybrid work model, this full-time position offers a unique blend of technical security work and AI-augmented platform development.
What you'll do
- Lead High Severity security investigations end-to-end: acknowledge, investigate with depth, document as you go, and own through resolution
- Triage High Severity candidates — promote decisively when indicators are clear, downgrade with documented rationale when they're not
- Analyze open source threat intelligence — validate temporal IOCs and proactively block threats
What you need
Must-have
PythonSplunkELKCrowdStrikeCarbon BlackHTTPDNSTCP/IP
Nice-to-have
Detection EngineeringAI/LLM-powered automationMalware Analysis / Reverse EngineeringDigital ForensicsSecurity Tool Development & AutomationNetwork & OS SecurityIdentity ManagementVirusTotal
Soft skills
CommunicationProblem SolvingCritical ThinkingAdaptabilityLeadershipTime ManagementMentoring
Security Incident ResponseAWSIncident ResponseSecurity EngineeringAI AutomationThreat IntelligenceForensicsPythonHybridMelbourne