Security Engineer, AWS Security

About the role

Amazon Web Services (AWS) is looking for a Security Systems Engineer to protect the security and integrity of its systems and infrastructure. You will work closely with the security team to implement and maintain measures that meet Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Applicants must be Australian citizens and hold or be eligible for an Australian Government security clearance, and be able to complete an Organisational Suitability Assessment.

Key responsibilities

• Perform security event monitoring, incident management and response, investigating alerts and acting as escalation point
• Develop, tune and maintain SIEM detections, dashboards and correlation rules
• Conduct proactive threat hunting and analysis, and investigate suspicious behaviour
• Support integration and optimisation of security data sources in SIEM platforms
• Contribute to SOC process improvement and automation, including writing SOC SOPs and runbooks
• Apply frameworks such as MITRE ATT&CK and NIST alongside the ISM and PSPF
• Perform on-call duties as required, outside business hours

Required profile

• Australian citizenship with eligibility for a security clearance
• 3+ years as a SOC Analyst or defensive cyber role (preferred: 5+ years)
• Good understanding of incident response, threat detection and security monitoring
• Excellent analytical, problem-solving and communication skills

Required skills

• Experience with SIEM tools such as Splunk, Microsoft Sentinel, Sumo Logic or similar
• Good working knowledge of foundational systems and protocols such as HTTP, DNS and TCP/IP
• Preferred: strong knowledge of cryptography, identity and access management and application security, AWS product knowledge