Senior Security Engineer, Operational Research and Development

We are building systems that investigate and remediate security incidents at machine speed, reducing human intervention from triage to eradication to the strict minimum. Join us to define what autonomous incident response looks like at the scale of the world's largest cloud provider. Amazon Security's Operational Research and Development team combines deep security expertise with software engineering to transform how AWS responds to security events. We don't just build tools for responders; we build the intelligence that replaces manual investigation entirely: automated log dives, DFIR pipelines, fix identification, and autonomous mitigation. Key job responsibilities As a Senior Security Engineer, you will: - Own the response playbooks and investigation methodology that power our automation platforms - Design and implement autonomous incident response workflows: from initial triage through root cause analysis to remediation - Build automated DFIR capabilities including log correlation, forensic evidence collection, and threat eradication at cloud scale - Drive the security domain decisions (how to investigate, when to act, what to fix) while partnering with SDEs on platform scalability - Participate in an on-call rotation focused on maintaining automation health, and seucrity escalations - Mentor engineers across the team on security domain expertise and incident response best practices About the team The Operational Research and Development team sits within Amazon Security. We are a mixed team of Security Engineers and Software Development Engineers who share a single mission: make security incident response so fast and accurate that human involvement becomes a choice, not a necessity. Our engineers own what they build. Each person carries meaningful end-to-end ownership of production systems, from design through deployment and operational excellence. We prototype rapidly, ship iteratively, and treat every manual step in our response pipelines as a problem to solve permanently. The team values directness, intellectual honesty, and a bias toward building over discussing. We maintain a flexible, distributed working culture and core collaboration hours that respect personal time. We are intentional about building an inclusive environment where diverse backgrounds and perspectives drive better security outcomes. Whether your path to security engineering was traditional or not, what matters is your ability to think critically about threats and translate that thinking into systems that act autonomously. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives,