[Skip to main content](#main-content) [ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/) Amazon · AU, NSW, Sydney # Systems Engineer, AWS Incident Response AU, NSW, Sydney Operations Listed on Amazon’s official careers site. Posted October 19, 2026. Check that it is still open and apply there. [Apply on Amazon’s careers site →](https://www.amazon.jobs/en/jobs/10582716/systems-engineer-aws-incident-response) [OpenNash Jobs](https://jobs.opennash.com/) / [Amazon](https://jobs.opennash.com/companies/amazon/) / Systems Engineer, AWS Incident Response ## Job description As a Systems Engineer on AWS Incident Response, you will be on the front line of AWS incident response. You will lead high-severity calls, triage complex failures across distributed systems, coordinate resolver teams, and drive incidents to mitigation in real time while millions of customers depend on the outcome. Between incidents you will obsess over metrics and detection analysis, building dashboards and mechanisms that surface problems before customers notice, and you will drive operational improvements that make the incident management ecosystem faster and more accurate. You will make real-time decisions under pressure, deep-diving the largest and most complex technical environment in the world. You will develop expertise across AWS services, networking, and infrastructure, building a breadth of knowledge that few roles offer. Your scope spans all of AWS rather than a single service. You will own operational processes end to end and use data to find the next improvement in how we detect and mitigate faster. You will also have the opportunity to grow your development skills by taking on coding projects that accelerate incident response and reduce toil. This role includes participation in an on-call rotation covering weekdays, weekends, and holidays. On-call shifts fall within your local daytime hours. ### Key job responsibilities - Lead high-severity incident response calls end to end: assess impact, coordinate resolvers across AWS service teams, communicate clearly under pressure, manage escalations, and drive the incident to mitigation with documentation throughout. - Own and run operational health reviews, and build and maintain the dashboards, metrics, and monitoring that surface trends before they become incidents. - Improve detection accuracy and speed. Identify patterns across events and build proactive mechanisms that prevent recurrence. - Deep-dive operational data to find systemic issues, measure response effectiveness, and prioritize improvements against what the data shows is degrading. - Identify gaps in operational processes, documentation, and tooling, and build or improve mechanisms that reduce time-to-detection and time-to-mitigation. - Apply scripting, automation, and generative AI to accelerate incident response and reduce toil, including where AI can augment human judgment during an incident or surface insight from operational data at scale. - Work with service teams so that learnings from each incident drive corrective actions to completion, closing the loop between what broke and what gets fixed. - Mentor peers in your areas of technical and operational strength. ### A day in the life When you are on call, incidents take priority. You join the incident bridge, assess the scope of impact from real-time metrics and dashboards, engage the resolver teams that own the affected services, and drive the event to mitigation, escalating when progress stalls. Off-call, you work to reduce time-to-detection and time-to-mitigation: deep-diving recent events for detection that lagged the impact or alarms that trigger without customer impact, correcting the signal behind them, leading operational health reviews, driving other teams' corrective actions to completion, and owning projects that strengthen AIR's detection and incident management, including automation you can build yourself. ### About the team AWS Incident Response (AIR), part of the AWS Resilience organization, ensures high availability of AWS. When major incidents hit, AIR leads the response, coordinating resolver teams across AWS and driving mitigation. We move fast, but not carelessly, obsessing over observability of the cloud and continuously improving our detection and response speed and accuracy. Each incident feeds improvements to our detection, processes, and tooling, making the next one shorter or preventing it entirely. This is a high-visibility, high-impact role with a global view of AWS health that few teams get to see. ## At a glance - Posted by the employer: Oct 19, 2026 - First seen by OpenNash: Oct 25, 2026 - Last checked: Nov 1, 2026 - Listed for: 13 days - Location: AU, NSW, Sydney[Apply on Amazon’s careers site →](https://www.amazon.jobs/en/jobs/10582716/systems-engineer-aws-incident-response) ## Hiring at Amazon - Open jobs: 21,930 - New in the last 7 days: After two weekly collections - Tracked since: Jul 10, 2026 [All Amazon jobs](https://jobs.opennash.com/companies/amazon/) · [Weekly hiring report](/reports/hiring/) ## More jobs at Amazon ### [Tech Ops Engineer - Incident Management, Central Technical Operations Services (CTOS)](https://jobs.opennash.com/companies/amazon/jobs/c69f1b276cf55bd8db0d/) AU, NSW, Sydney ### [Tech Training Specialist, DCEO, AWS Infra Operations](https://jobs.opennash.com/companies/amazon/jobs/adf8652d4034a940101b/) AU, NSW, Sydney ### [Technical Curriculum Developer, Dedicated Cloud Training](https://jobs.opennash.com/companies/amazon/jobs/0d4006be0c21047d9268/) AU, NSW, Sydney ### [Technical Infrastructure Program Manager, DCC Communities](https://jobs.opennash.com/companies/amazon/jobs/f9711cbad4a913a97a55/) AU, NSW, Sydney ### [Technical Infrastructure Program Manager, Global Network Delivery](https://jobs.opennash.com/companies/amazon/jobs/38a4d103e5498c97d358/) AU, NSW, Sydney ## Similar jobs at other companies ### [Incident Manager](https://jobs.opennash.com/companies/ntt/jobs/29fbd61c0d1f650c2746/) NTT · Noida, UP, IN, India ### [Incident Response Analyst](https://jobs.opennash.com/companies/ntt/jobs/e69a7ade261a569584db/) NTT · Buenos Aires, Argentina ### [Incident Response Analyst](https://jobs.opennash.com/companies/fortinet/jobs/0b95d997a07998dd7dff/) Fortinet · Tel Aviv, Israel ### [Cybersecurity Incident Response Lead](https://jobs.opennash.com/companies/microsoft/jobs/0a5610e1958c0d34e891/) Microsoft · Singapore ### [Senior Incident Response Engineer](https://jobs.opennash.com/companies/microsoft/jobs/a6e22d02d8ba2b9e4c83/) Microsoft · Portugal, Lisbon [Operations jobs](/functions/operations/) OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. [ OpenNash ](https://opennash.com/) AI-native services firm that builds custom software and 24/7 AI agents. OpenNash Jobs is an OpenNash Applied AI project. [Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1) Jobs - [Search jobs](https://jobs.opennash.com/search/) - [Companies](https://jobs.opennash.com/explore/) - [Hiring report](https://jobs.opennash.com/reports/hiring/) - [AI assistants](https://jobs.opennash.com/connect/) - [How it works](https://jobs.opennash.com/methodology/) OpenNash - [opennash.com](https://opennash.com/) - [Services](https://opennash.com/ai-agent-consulting/) - [OpenNash CX](https://opennash.com/cx/) - [AI Tools](https://opennash.com/ai-tools/) - [Blog](https://opennash.com/blog/) - [About](https://opennash.com/about/) Contact - [hello@opennash.com](mailto:hello@opennash.com) - [LinkedIn](https://www.linkedin.com/company/opennash) - [Support](https://jobs.opennash.com/support/) - [Privacy](https://jobs.opennash.com/privacy/) - [Terms](https://jobs.opennash.com/terms/) © 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.