Security Engineer, AWS Cloud Response
Amazon · Melbourne, Victoria, AUS ·
- Category
- Security
- Company size
- 1000+
Security engineer on AWS's Cloud Response team in Melbourne, doing follow-the-sun security operations and incident response for AWS cloud services: triaging issues, coordinating remediation with service teams, and building automation plus agentic AI frameworks. Shifts align to US Pacific time.
AWS is looking for a Security Engineer to join the Cloud Response team in Australia.
The team manages the security and availability of AWS Cloud services. We operate on the "AWS" side of the Shared Responsibility Model to ensure "Security of the Cloud" and to protect our customers. This role requires engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale, and to think strategically to develop and implement changes to drive automation, scalability and continuous progress for the organization.
Key job responsibilities
A successful candidate will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include projects in addition to managing incident response activities. This role will provide career growth opportunities as you gain new security skills in the course of your duties.
Successful candidates will be expected to:
Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team.
Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including the AWS Chief Information Security Officer).
Participate in efforts to promote security throughout the company and build good working relationships with partner security teams and service teams across Amazon
Demonstrate high capacity for managing priorities appropriately while remaining productive and effective, with tolerance for context switching and interruptions
Escalate issues early and often, expressing a high degree of security judgement when issues are not progressing at the correct pace based on impact to ensure we are putting customers first.
Design and build automation that reduces manual toil in incident response, from triage to remediation tracking.
Design agentic systems and frameworks that let AI reason over security context and take action safely within incident response.
Explore and embrace the Amazon builder culture, identifying mechanisms and methods to improve tools and processes to simplify and drive issues at the scale and speed necessary to benefit our global team of engineers.
Fulfill regular on-call responsibilities during the team's working hours and in support of the global team's on-call weekend rotation
A day in the life
This position supports AWS with security operations and incident response activities. You will be responsible for coordinating and facilitating security response activities for all AWS products and services. You will drive security related issues to resolution across numerous service teams and engineer scalable solutions to automate incident response activities.
Each day, your team picks up the shift from the region that worked before you, starting by reviewing what's open and setting priorities for the day, before handing the shift on to the next region at the end of the day. You'll drive response on the issues you pick up, digging in until you understand the real risk rather than settling for the first plausible read, and when a decision carries real weight, you'll walk it through with your manager before committing to a path. You'll write clearly and precisely as you go, since the next person picking up an issue is relying entirely on what you left behind. Alongside the daily grind, you'll also be chipping away at your own project work, whether that's building a tool to cut down on manual toil or automating a piece of the incident response process that used to take up half your day. Shifts are aligned to the US Pacific time (PST/PDT, accounting for daylight savings across summer and winter).
About the team
Cloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations.
We work with AWS security and service teams to ensure security issues are addressed and resolved with the right level of urgency, while keeping our key stakeholders informed and engaged as necessary throughout the issue lifecycle. We also optimize our own operations by building tools and automation that let the team scale response capacity faster than incident volume grows.
We don't settle for a surface-level read on a security issue. We dig in until we understand the real risk, bring the right security expertise to the table, and partner with service teams to land on a clear path to resolution, whether that's a quick fix or a longer-term remediation. As our understanding of a class of issue matures, we push ownership back to the service teams best placed to own it long-term, while staying closely engaged wherever ambiguity remains.
The team is in the middle of a significant transformation, rebuilding how we work around AI and agentic frameworks that reason over security context and take action alongside our engineers. This is reshaping what the job looks like day to day, and there's real room to shape that direction rather than just adopt it.
The team manages the security and availability of AWS Cloud services. We operate on the "AWS" side of the Shared Responsibility Model to ensure "Security of the Cloud" and to protect our customers. This role requires engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale, and to think strategically to develop and implement changes to drive automation, scalability and continuous progress for the organization.
Key job responsibilities
A successful candidate will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include projects in addition to managing incident response activities. This role will provide career growth opportunities as you gain new security skills in the course of your duties.
Successful candidates will be expected to:
Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team.
Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including the AWS Chief Information Security Officer).
Participate in efforts to promote security throughout the company and build good working relationships with partner security teams and service teams across Amazon
Demonstrate high capacity for managing priorities appropriately while remaining productive and effective, with tolerance for context switching and interruptions
Escalate issues early and often, expressing a high degree of security judgement when issues are not progressing at the correct pace based on impact to ensure we are putting customers first.
Design and build automation that reduces manual toil in incident response, from triage to remediation tracking.
Design agentic systems and frameworks that let AI reason over security context and take action safely within incident response.
Explore and embrace the Amazon builder culture, identifying mechanisms and methods to improve tools and processes to simplify and drive issues at the scale and speed necessary to benefit our global team of engineers.
Fulfill regular on-call responsibilities during the team's working hours and in support of the global team's on-call weekend rotation
A day in the life
This position supports AWS with security operations and incident response activities. You will be responsible for coordinating and facilitating security response activities for all AWS products and services. You will drive security related issues to resolution across numerous service teams and engineer scalable solutions to automate incident response activities.
Each day, your team picks up the shift from the region that worked before you, starting by reviewing what's open and setting priorities for the day, before handing the shift on to the next region at the end of the day. You'll drive response on the issues you pick up, digging in until you understand the real risk rather than settling for the first plausible read, and when a decision carries real weight, you'll walk it through with your manager before committing to a path. You'll write clearly and precisely as you go, since the next person picking up an issue is relying entirely on what you left behind. Alongside the daily grind, you'll also be chipping away at your own project work, whether that's building a tool to cut down on manual toil or automating a piece of the incident response process that used to take up half your day. Shifts are aligned to the US Pacific time (PST/PDT, accounting for daylight savings across summer and winter).
About the team
Cloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations.
We work with AWS security and service teams to ensure security issues are addressed and resolved with the right level of urgency, while keeping our key stakeholders informed and engaged as necessary throughout the issue lifecycle. We also optimize our own operations by building tools and automation that let the team scale response capacity faster than incident volume grows.
We don't settle for a surface-level read on a security issue. We dig in until we understand the real risk, bring the right security expertise to the table, and partner with service teams to land on a clear path to resolution, whether that's a quick fix or a longer-term remediation. As our understanding of a class of issue matures, we push ownership back to the service teams best placed to own it long-term, while staying closely engaged wherever ambiguity remains.
The team is in the middle of a significant transformation, rebuilding how we work around AI and agentic frameworks that reason over security context and take action alongside our engineers. This is reshaping what the job looks like day to day, and there's real room to shape that direction rather than just adopt it.