Senior Security Engineer, Operational Research and Development

Amazon is hiring a Senior Security Engineer, Operational Research and Development for a remote role open to applicants in France. Level rates it ; you can apply on Amazon.

Level's read on this job

Works on AI ●●●○ is how Level rates this cybersecurity role: the daily work is on AI products, without building the model.
This is listed as a remote role.
The posting mentions incident response, security engineering and automation among its tools and skills.
Level classes it as a senior role.
Amazon has 20,000+ other open roles on Level.

AI in this role

Build autonomous incident response systems and automated security workflows at machine speed for AWS.

incident-responsesecurity-engineeringautomationpythondfir

We are building systems that investigate and remediate security incidents at machine speed, reducing human intervention from triage to eradication to the strict minimum. Join us to define what autonomous incident response looks like at the scale of the world's largest cloud provider.

Amazon Security's Operational Research and Development team combines deep security expertise with software engineering to transform how AWS responds to security events. We don't just build tools for responders; we build the intelligence that replaces manual investigation entirely: automated log dives, DFIR pipelines, fix identification, and autonomous mitigation.

Key job responsibilities
As a Senior Security Engineer, you will:
- Own the response playbooks and investigation methodology that power our automation platforms
- Design and implement autonomous incident response workflows: from initial triage through root cause analysis to remediation
- Build automated DFIR capabilities including log correlation, forensic evidence collection, and threat eradication at cloud scale
- Drive the security domain decisions (how to investigate, when to act, what to fix) while partnering with SDEs on platform scalability
- Participate in an on-call rotation focused on maintaining automation health, and seucrity escalations
- Mentor engineers across the team on security domain expertise and incident response best practices

About the team
The Operational Research and Development team sits within Amazon Security. We are a mixed team of Security Engineers and Software Development Engineers who share a single mission: make security incident response so fast and accurate that human involvement becomes a choice, not a necessity.

Our engineers own what they build. Each person carries meaningful end-to-end ownership of production systems, from design through deployment and operational excellence. We prototype rapidly, ship iteratively, and treat every manual step in our response pipelines as a problem to solve permanently.

The team values directness, intellectual honesty, and a bias toward building over discussing. We maintain a flexible, distributed working culture and core collaboration hours that respect personal time.

We are intentional about building an inclusive environment where diverse backgrounds and perspectives drive better security outcomes. Whether your path to security engineering was traditional or not, what matters is your ability to think critically about threats and translate that thinking into systems that act autonomously.

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training and Career growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Basic qualifications

- Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
- Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
- Experience working in identifying security issues and risks, and developing mitigation plans
- Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
- Experience as a mentor, tech lead or leading an engineering team

Preferred qualifications

- Experience generating automated metrics to measure service and program effectiveness and consistency
- Experience designing or building automated security response workflows, playbooks, or orchestration systems (SOAR, custom pipelines, or equivalent)

Amazon est un employeur engagé pour l'égalité des chances. Nous sommes convaincus qu'une main d'oeuvre diversifée est essentielle à notre réussite. Nous prenons nos décisions de recrutement en fonction de votre expérience et de vos compétences. Nous apprécions votre envie de découvrir, d'inventer, de simplifier et de construire. La protection de votre vie privée et la sécurité de vos données constituent depuis longtemps une priorité absolue pour Amazon. Veuillez consulter notre Politique de Confidentialité pour en savoir plus sur la façon dont nous collectons, utilisons et traitons les données personnelles de nos candidats.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

How we rate this

Senior Security Engineer, Operational Research and Development at Amazon rates 65 out of 100 for how much of the daily work is AI. That makes it Works on AI (AI Level 3 of 4). The level is about AI in the job, not seniority.

Classification

Works on AI. The daily work is on AI products, without building the model.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Senior Security Engineer, Operational Research and Development is an open job at Amazon.
Level rates this role AI Level 3 of 4: Works on AI.
The role is based in FR, Courbevoie and is marked remote.
The job was posted on September 2, 2026.
Seniority: senior.
Applications are handled by Amazon. Apply on Amazon

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Incident ResponseSecurity EngineeringAutomationPythonDfir

Also common in cybersecurity jobs at this level

Python LLM AI agents Google Cloud Kubernetes Azure

Pay

Typical cybersecurity job: $160k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

Tell me about a project where incident response was part of your work. What did you do?
Tell me about a project where security engineering was part of your work. What did you do?
Tell me about a project where automation was part of your work. What did you do?
Tell me about a project where python was part of your work. What did you do?
Tell me about a project where dfir was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Incident Response, Security Engineering, Automation, Python, and Dfir. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Show where AI is part of your daily process, not a one-off project. This role expects it to be a running habit.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get a free CV review Check your resume with the ATS resume checker