Security Incident Response Engineer, AWS Security Corporate Response
Core
Lead high-severity security investigations end-to-end and build agentic investigation platforms to automate threat response at massive scale.
Role type
Senior Security Incident Response Engineer (AI/Agentic Platform)
Builds
Agentic investigation platform, tactical scripts, detection rules, and response automations
Domain
Cybersecurity, Threat Intelligence, AI/LLM Automation
Deliverable
production ML models
Required skills
Incident response, malware analysis, host forensics, Python scripting, log analysis (Splunk/ELK), EDR tools, networking protocols, OS internals
Preferred skills
Detection engineering, AI/LLM-powered automation design, threat intelligence platforms, IOC enrichment, security tool development
Technologies
Python, Splunk, ELK, CrowdStrike, Carbon Black, VirusTotal, MITRE ATT&CK
Responsibilities
Lead high-severity security investigations from detection to remediation; Triage and prioritize security incidents; Analyze open-source threat intelligence; Author and validate agent investigation user stories; Design guardrails and policies for autonomous agents; Build tactical scripts and automations; Participate in global on-call rotation
Seniority
Senior, hands-on IC with leadership of high-performing team
