Cyber Security Engineer AWS

Job ID: 3128132 | Amazon Web Services Australia Pty Ltd
Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure.
AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM).
Hold or be able to attain an Australian Government Security Vetting Agency clearance (see
Perform security event monitoring, incident management and response.
Conduct proactive threat hunting and analysis to identify suspicious behaviour.
Investigate, respond, and be the escalation point for security alerts and incidents.
Support the integration and optimisation of security data sources within SIEM platforms.
Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations.
Perform on‑call duties as required, out of business hours.
Monitor security alerts in real time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed.
Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment.
Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage.
Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components.
Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive‑level reports summarizing security posture and trends, and build real‑time dashboards for continuous monitoring of security operations effectiveness.
Diverse Experiences – AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security – At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We believe that there are no “perfect” security solutions and we develop and iterate using a continuous improvement process.
Inclusive Team Culture – AWS values curiosity and connection. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Mentorship & Career Growth – We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge‑sharing, mentorship and other career‑advancing resources here to help you develop into a better‑rounded professional.
3+ years experience as a SOC Analyst or Defensive Cyber Role.
~ Splunk, Microsoft Sentinel, Sumo Logic, or similar).
~ Good understanding of incident response, threat detection, and security monitoring.
~ 5+ years experience as a SOC Analyst or Defensive Cyber Role.
~ Demonstrated experience and application of incident response, threat detection, and security monitoring in high security environments.
~ Strong technical working knowledge of key security domains, e.g. Cryptography, Identity & Access Management and Application Security.
~ Experience with AWS products and services.

Acknowledgement of country – In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community.