Security Engineer II, AWS Cloud Security Response

About the role

The AWS Cloud Security Response team operates on the ‘AWS’ side of the Shared Responsibility Model, protecting our customers by ensuring the security of AWS Cloud services. Our engineers independently investigate and resolve security issues across 200+ AWS products, working hands-on with service code, security data, and cloud infrastructure at massive scale.

This role goes beyond coordination. You will apply security judgment to drive outcomes, close security gaps through code, and build automation that scales how we respond to security issues. You will think strategically, identifying patterns that point to systemic risks and driving proactive solutions before issues recur.

We are looking for security professionals who bring deep technical curiosity and the judgment to operate autonomously in a fast-paced, ambiguous environment. You will leverage the latest technology and tools to augment your capabilities, and you will partner closely with engineering teams to achieve security outcomes.

Successful candidates should:

- Exercise independent security judgment to assess risk, form informed opinions on severity, and drive engineering teams toward the right outcomes.

- Take a hands-on investigative approach to security issues, building deep technical understanding of risk and customer impact.

- Be technically proficient across security domains including network and operating system security, cryptography, software security, and incident response.

- Communicate complex security issues clearly to both technical and non-technical audiences at all levels.

- Challenge flawed analysis and escalate to senior leadership to ensure the best outcome for customers, even against consensus.

- Work effectively in AI-augmented workflows, using generative AI tools to accelerate security work.

- Mentor and coach junior engineers on security practices and professional growth.

- Drive security outcomes across organizational boundaries, partnering effectively with service teams and peer security teams.

An ideal candidate should be able to conduct most of the following:

- Close security gaps through code, working alongside service teams to develop and validate remediations.

- Navigate complex IAM and access control issues with confidence and technical depth.

- Build automation that improves how the team operates at scale.

- Think proactively, identifying systemic security themes and driving solutions that prevent classes of issues.

- Engage with cloud services at the architectural level, understanding how they work in order to assess and address risk.

Key job responsibilities

- Identify recurring security patterns across AWS services and drive proactive solutions that address root causes and prevent classes of issues.

- Build automation to scale incident response procedures, improving efficiency and reducing manual effort across the team’s global operations.