Security Incident Response Engineer, AWS Security Corporate Response
AI
AWS Corporate Security Response is seeking a Security Incident Response Engineer to lead high-severity security investigations and shape an AI-powered agentic investigation platform. The role combines hands-on incident response with automation, requiring expertise in threat analysis, forensics, and security tooling. Based in Melbourne, this is a full-time on-site position within a global follow-the-sun team.
What you'll do
- Lead High Severity security investigations end-to-end: acknowledge, investigate with depth, document as you go, and own through resolution
- Triage High Severity candidates — promote decisively when indicators are clear, downgrade with documented rationale when they're not
- Analyze open source threat intelligence — validate temporal IOCs and proactively block threats
What you need
Must-have
PythonSplunkELKCrowdStrikeCarbon BlackHTTPDNSTCP/IP
Nice-to-have
Detection EngineeringAI/LLM-powered automationMalware Analysis / Reverse EngineeringDigital ForensicsSecurity Tool Development & AutomationNetwork & OS SecurityIdentity ManagementVirusTotal
Soft skills
CommunicationProblem SolvingCritical ThinkingAdaptabilityLeadershipAttention to DetailCollaboration
Security Incident ResponseAWS SecurityIncident ResponseSecurity EngineeringAI AutomationThreat IntelligenceForensicsPythonMelbourneFull-time