Description

AWS Corporate Security Response is looking for a Security Engineer who thrives at the intersection of hands-on incident response and intelligent automation. You must think like both an attacker and a defender — understanding adversary tradecraft to detect, investigate, and disrupt threats across Amazon's corporate infrastructure at massive scale.

You'll investigate active threats — malware campaigns, phishing attacks, credential compromise, and novel attack patterns — while simultaneously shaping an agentic investigation platform that scales our response capability beyond what any human team could achieve alone.

You will independently lead security investigations from detection through containment and remediation. You'll extract IOCs, perform host forensics, scope impact across multiple data sources, check for lateral movement, and drive security issues to resolution — documenting every step as the investigation unfolds. You'll also ser...