AWS Security Engineer — SIEM, Threat Hunting & IR

Amazon Web Services (AWS); Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure in Australia. You will implement and maintain robust security measures that align with PSPF and ISM.

Key responsibilities include security monitoring, SIEM detection development, threat hunting, incident response, and on-call duties within a SOC environment. Collaboration with IT and security teams is essential to strengthen our security posture.

Qualifications

• 3+ years experience as a SOC Analyst or Defensive Cyber Role.
• Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar).
• Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments.

Responsibilities

• Perform security event monitoring, incident management and response.
• Develop, tune, and maintain SIEM detections, dashboards, and correlation rules
• Conduct proactive threat hunting and analysis to identify suspicious behaviour
• Investigate, respond and be the escalation point for security alerts and incidents
• Support the integration and optimisation of security data sources within SIEM platforms
• Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOPs and runbooks
• Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations.
• Perform on-call duties as required, out of business hours.

Tools

SIEM tools (Splunk, Microsoft Sentinel, Sumo Logic)

Job description

AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure in Australia. You will implement and maintain robust security measures that align with PSPF and ISM.

Key responsibilities include security monitoring, SIEM detection development, threat hunting, incident response, and on-call duties within a SOC environment. Collaboration with IT and security teams is essential to strengthen our security posture.