Security Engineer II, AWS Security Corporate Response
Core
Lead hands-on security investigations and build autonomous AI agents to detect, investigate, and disrupt threats across Amazon's corporate infrastructure at massive scale.
Role type
Senior IC Security Engineer (Incident Response & AI Automation)
Builds
Agentic investigation platform, tactical scripts, detection rules, and response automations
Domain
Cybersecurity, Incident Response, AI/LLM Automation
Deliverable
production ML models
Required skills
Incident response, malware analysis, Python scripting, log analysis (Splunk/ELK), EDR tools, networking protocols, OS internals (Windows/Linux), threat intelligence analysis
Preferred skills
Detection engineering, AI/LLM-powered automation design, reverse engineering, digital forensics, security tool development, threat intelligence platforms, YARA/Sigma rule writing, cloud security
Technologies
Python, Splunk, ELK, CrowdStrike, Carbon Black, AWS, VirusTotal, MITRE ATT&CK, YARA, Sigma
Responsibilities
Lead Sev2 security investigations end-to-end from detection to remediation; Triage and prioritize security incidents; Analyze open source threat intelligence; Author and validate agent investigation user stories; Design and test guardrails for autonomous agents; Build tactical scripts and detection rules; Participate in global on-call rotation
Seniority
Senior, hands-on IC