Security Engineer, AWS Customer Incident Response Team (CIRT)

Amazon is hiring a Security Engineer, AWS Customer Incident Response Team (CIRT) in Brisbane, Australia. Level rates it ; you can apply on Amazon.

Level's read on this job

On Level's scale, this cybersecurity role is Little AI ●○○○: aI is not part of the work.
The posting mentions AWS, incident response and cloud security among its tools and skills.
Level classes it as a senior role.
Amazon has 20,000+ other open roles on Level.

AI in this role

Lead planetary scale cloud incident response and security automation solutions for AWS customers.

AWS

incident-responsecloud-securitythreat-detectionautomation

Do you want to work on planetary scale incident response solutions in the cloud? Are you skilled at performing Security Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the AWS Customer Incident Response Team in the AWS Security organization, you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges.

The AWS Customer Incident Response team, a part of AWS Security, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers

Cloud security is our highest priority at AWS. As an AWS customer, you benefit from an environment built to meet the requirements of the most security-sensitive organizations. As an AWS Security team member, you will help secure that environment for our customers while working on security products for a variety of platforms and technologies, all operating at massive scale.

We are looking for an experienced security engineer with an ability to scale security and make the right trade-off decisions that enable us to offer secure, innovative solutions to customers.

Key job responsibilities
• Perform and oversee incident response operations
• Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event.
• Independently contribute to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities.
• Design, build, and deploy solutions to automate security operations and incident response on AWS.
• Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers.
• Develop high-quality content, such as automation tools, reference architectures, and white papers to help our consultants, partners, and customers build on the work that we deliver.
• Innovate on behalf of customers by translating your thoughts into actionable results.
• Mentor and invest in our consultants, partners, and customers to raise the bar for our customers.
• On-call required.

About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic qualifications

- 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
- Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
- Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)
- Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
- Knowledge of general AI tools

Preferred qualifications

- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
- Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
- Experience with AWS products and services
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Acknowledgement of country:
In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.

IDE statement:
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

How we rate this

Security Engineer, AWS Customer Incident Response Team (CIRT) at Amazon rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Security Engineer, AWS Customer Incident Response Team (CIRT) is an open job at Amazon.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in AU, QLD, Brisbane.
The job was posted on September 8, 2026.
Seniority: senior.
Applications are handled by Amazon. Apply on Amazon

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Incident ResponseCloud SecurityThreat DetectionAutomationAWS

Also common in cybersecurity jobs at this level

Python Azure Google Cloud Kubernetes Terraform Java

Pay

Typical cybersecurity job: $160k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

Tell me about a project where incident response was part of your work. What did you do?
Tell me about a project where cloud security was part of your work. What did you do?
Tell me about a project where threat detection was part of your work. What did you do?
Tell me about a project where automation was part of your work. What did you do?
Walk me through how you've used AWS in your day-to-day work.

Adapt your resume

List these exact terms on your resume: Incident Response, Cloud Security, Threat Detection, Automation, and AWS. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get a free CV review Check your resume with the ATS resume checker