Security Engineer II, AWS Security Corporate Response

AWS Corporate Security Response is looking for a Security Engineer who thrives at the intersection of hands-on incident response and intelligent automation. You must think like both an attacker and a defender Basic qualifications: - Bachelor's degree in computer science or equivalent, or experience in IT Security - Experience in security operations, incident response, or security engineering - Hands-on experience investigating security incidents (malware analysis, phishing response, credential compromise, or network intrusion) - Proficiency in Python or similar scripting language for security automation and tooling - Experience with log analysis platforms (Splunk, ELK, or equivalent) and EDR tools (CrowdStrike, Carbon Black, or equivalent) - Knowledge of networking protocols (HTTP, DNS, TCP/IP) and operating system internals (Windows and Linux) Preferred: - Experience performing detection engineering in a dedicated or hybrid capacity supporting incident response and threat intelligence operations - Experience designing or validating AI/LLM-powered automation in a security context - Proficiency in at least one specialization domain: Malware Analysis / Reverse Engineering; Digital Forensics; Security Tool Development & Automation; Network & OS Security; Identity Management - Experience with threat intelligence platforms and IOC enrichment (VirusTotal, MITRE ATT&CK framework) - Experience writing detection rules (YARA, Sigma, or custom) - Experience with Amazon Web Services and cloud security - Track record of building security automation that measurably reduced manual operational burden - Security certifications (GCIH, GCFA, GREM, OSCP, or equivalent) are a plus but not required Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.