AWS Security Incident Response is looking for a Security Manager who combines deep technical expertise in security operations with the leadership judgment to drive a team through a fundamental transformation — from human-driven investigation to AI-native security operations. You will own operational excellence for a global team of security engineers and data scientists, engage directly with customer security executives during high-severity incidents, and drive the response-to-automation flywheel that makes the service smarter with every investigation.

The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve the majority of routine investigations within minutes, allowing engineers to focus on complex threat analysis, proactive hunting, and customer engagement. We treat every investigation as a confirmed security incident until the data proves otherwise.

Based in Singapore, this role also contributes part-time capacity to a strategic AWS engagement in the region that brings together cybersecurity, data engineering, and AI/ML to support large-scale threat detection and response capabilities.

Internal job description

Basic qualifications

• 5+ years of managing and developing teams experience
• 5+ years of progressive work within a software security team or related operating environment experience
• Bachelor's degree in Computer Science, Information Security, or a related field
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
• Experience in managing and developing teams
• Experience in progressive work within a software security team or related operating environment
• Experience applying threat modeling or other risk identification techniques or equivalent

Preferred qualifications

• information security professional certification (SANS GIAC, CISSP etc.)
• Master's degree in Computer Science or a related field
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques
• Experience managing remote team members

Job Description & Requirements

Position Overview

We are seeking a talented and motivatedSecurity Platform Engineer with expertise in Fortinet SIEM onboarding,patching, use case creation, and SentinelOne operations—including agentpatching. The ideal candidate will also demonstrate proficiency with FortiSOAR,Orca Security platforms, and Palo Alto platform management. This role iscritical for maintaining the integrity and effectiveness of our securityinfrastructure, supporting both proactive and reactive cybersecurityinitiatives.

Key Responsibilities

·      Lead the onboarding andintegration of Fortinet SIEM solutions, ensuring seamless data ingestion,correlation, and alerting.

·      Manage and execute patchingprocesses for Fortinet SIEM platforms and related infrastructure to maintaincompliance and optimal performance.

·      Develop, test, and implementuse cases within Fortinet SIEM to enhance detection capabilities and addressemerging threats.

·      Oversee SentinelOne operations,including the deployment, configuration, and patching of endpoint agents acrossthe organization.

·      Utilize FortiSOAR toorchestrate, automate, and respond to security incidents, improving incidentresponse efficiency.

·      Employ Orca Security for cloudsecurity posture management, vulnerability assessment, and compliancemonitoring.

·      Own Palo Alto Networks platformengineering for Cortex XSIAM/XDR (and related security services), includingtenant administration, upgrades/patching, health monitoring, troubleshooting,and lifecycle management.

·      Engineer data onboarding intoXSIAM: integrate log sources and telemetry (endpoint, network, cloud,identity), validate parsing/normalization, manage data models/mappings, andensure high-fidelity ingestion for analytics.

·      Develop and tune XSIAMdetection content (correlation rules, analytics, and alert logic): reduce falsepositives, build threat-focused use cases, and maintain content throughtesting, release, and continuous improvement.

·      Build and maintain XSIAMautomations and integrations (playbooks, case management workflows, enrichment,ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-callprocedures for reliable platform operations.

·      Collaborate withcross-functional teams to support security monitoring, incident response, andcontinuous improvement initiatives.

·      Document processes, procedures,and configurations for knowledge sharing and compliance purposes.

Required Qualifications

·      Proven experience with FortinetSIEM solutions, including onboarding, patching, and use case development.

·      Hands-on expertise inSentinelOne endpoint protection, with a focus on agent management and patching.

·      Familiarity with FortiSOAR forsecurity orchestration, automation, and response.

·      Experience working with OrcaSecurity or similar cloud security posture management tools.

·      Demonstrated experienceengineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (andideally XSOAR)—including integrations, data onboarding, content/detectiontuning, upgrades/patching, and troubleshooting.

·      Strong understanding ofcybersecurity principles, threat detection, and incident response processes.

·      Ability to troubleshoot complexsecurity platform issues and propose effective solutions.

·      Excellent documentation,communication, and collaboration skills.

Preferred Qualifications

·      Industry certifications such asFortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, orother relevant security certifications.

·      Experience with scripting orautomation tools to streamline security operations.

·      Familiarity with regulatorycompliance frameworks and audit requirements.

·      Bachelor’s degree in ComputerScience, Information Security, or a related field.

Position Overview

We are seeking a talented and motivatedSecurity Platform Engineer with expertise in Fortinet SIEM onboarding,patching, use case creation, and SentinelOne operations—including agentpatching. The ideal candidate will also demonstrate proficiency with FortiSOAR,Orca Security platforms, and Palo Alto platform management. This role iscritical for maintaining the integrity and effectiveness of our securityinfrastructure, supporting both proactive and reactive cybersecurityinitiatives.

Key Responsibilities

·      Lead the onboarding andintegration of Fortinet SIEM solutions, ensuring seamless data ingestion,correlation, and alerting.

·      Manage and execute patchingprocesses for Fortinet SIEM platforms and related infrastructure to maintaincompliance and optimal performance.

·      Develop, test, and implementuse cases within Fortinet SIEM to enhance detection capabilities and addressemerging threats.

·      Oversee SentinelOne operations,including the deployment, configuration, and patching of endpoint agents acrossthe organization.

·      Utilize FortiSOAR toorchestrate, automate, and respond to security incidents, improving incidentresponse efficiency.

·      Employ Orca Security for cloudsecurity posture management, vulnerability assessment, and compliancemonitoring.

·      Own Palo Alto Networks platformengineering for Cortex XSIAM/XDR (and related security services), includingtenant administration, upgrades/patching, health monitoring, troubleshooting,and lifecycle management.

·      Engineer data onboarding intoXSIAM: integrate log sources and telemetry (endpoint, network, cloud,identity), validate parsing/normalization, manage data models/mappings, andensure high-fidelity ingestion for analytics.

·      Develop and tune XSIAMdetection content (correlation rules, analytics, and alert logic): reduce falsepositives, build threat-focused use cases, and maintain content throughtesting, release, and continuous improvement.

·      Build and maintain XSIAMautomations and integrations (playbooks, case management workflows, enrichment,ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-callprocedures for reliable platform operations.

·      Collaborate withcross-functional teams to support security monitoring, incident response, andcontinuous improvement initiatives.

·      Document processes, procedures,and configurations for knowledge sharing and compliance purposes.

Required Qualifications

·      Proven experience with FortinetSIEM solutions, including onboarding, patching, and use case development.

·      Hands-on expertise inSentinelOne endpoint protection, with a focus on agent management and patching.

·      Familiarity with FortiSOAR forsecurity orchestration, automation, and response.

·      Experience working with OrcaSecurity or similar cloud security posture management tools.

·      Demonstrated experienceengineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (andideally XSOAR)—including integrations, data onboarding, content/detectiontuning, upgrades/patching, and troubleshooting.

·      Strong understanding ofcybersecurity principles, threat detection, and incident response processes.

·      Ability to troubleshoot complexsecurity platform issues and propose effective solutions.

·      Excellent documentation,communication, and collaboration skills.

Preferred Qualifications

·      Industry certifications such asFortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, orother relevant security certifications.

·      Experience with scripting orautomation tools to streamline security operations.

·      Familiarity with regulatorycompliance frameworks and audit requirements.

·      Bachelor’s degree in ComputerScience, Information Security, or a related field.