Security Engineer, AWS Security

About the role

Amazon Web Services (AWS) is looking for a Security Systems Engineer to protect the security and integrity of its systems and infrastructure. You will work closely with the security team to implement and maintain measures that meet Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Vetting Agency clearance, and be able to complete an Organisational Suitability Assessment.

Key responsibilities

• Perform security event monitoring, incident management and response
• Develop, tune and maintain SIEM detections, dashboards and correlation rules
• Conduct proactive threat hunting and analysis to identify suspicious behaviour
• Investigate, respond to and escalate security alerts and incidents
• Support integration and optimisation of security data sources in SIEM platforms
• Contribute to SOC process improvement and automation, including writing SOC SOPs and runbooks
• Apply frameworks such as MITRE ATT&CK and NIST alongside the ISM and PSPF
• Perform on-call duties as required, outside business hours

Required profile

• Australian citizenship and eligibility for an Australian Government security clearance
• 3+ years of experience as a SOC Analyst or in a defensive cyber role
• Demonstrated experience in incident response, threat detection and security monitoring in high-security environments

Required skills

• Experience with SIEM tools such as Splunk, Microsoft Sentinel, Sumo Logic or similar
• Preferred: good working knowledge of HTTP, DNS and TCP/IP
• Preferred: strong technical knowledge of cryptography, identity and access management and application security

The team welcomes diverse experience and offers mentorship, career growth and flexible working arrangements.