AWS Security Engineer - SOC & Threat Detection

Amazon Web Services (AWS); City of Melbourne; On-site; AUD 100,000 - 140,000; Full time

Job summary

Amazon Web Services Australia Pty Ltd in Melbourne is seeking a Security Engineer/SOC Analyst to monitor and respond to security threats within a global cloud environment. You will work with SIEM tools, threat intel and incident response processes to protect AWS infrastructure and customer data.

The role requires 3+ years in a SOC/defensive cyber role, strong analytical skills, and the ability to operate in a high-security environment with on-call duties and cross-team collaboration.

Qualifications

• 3+ years experience as SOC Analyst or Defensive Cyber Role.
• Experience with SIEM tools (Splunk, Microsoft Sentinel, Sumo Logic).
• Understanding of incident response, threat detection, and security monitoring.
• Knowledge of HTTP, DNS, TCP/IP.

Responsibilities

• Hold or attain Australian Government Security Vetting Agency clearance.
• Perform security event monitoring, incident management and response.
• Develop, tune, and maintain SIEM detections, dashboards, and correlation rules.
• Conduct proactive threat hunting and analysis to identify suspicious behaviour.
• Investigate, respond and be the escalation point for security alerts and incidents.
• Support the integration and optimisation of security data sources within SIEM platforms.
• Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP’s and runbooks.
• Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations.
• Perform on-call duties as required, out of business hours.

Skills

SOC Analyst experience

Threat detection

Incident response

Security monitoring

SIEM tools

IP protocols

Analytical skills

Communication skills

Tools

Splunk

Microsoft Sentinel

Sumo Logic

Job description

Amazon Web Services Australia Pty Ltd in Melbourne is seeking a Security Engineer/SOC Analyst to monitor and respond to security threats within a global cloud environment. You will work with SIEM tools, threat intel and incident response processes to protect AWS infrastructure and customer data.

The role requires 3+ years in a SOC/defensive cyber role, strong analytical skills, and the ability to operate in a high-security environment with on-call duties and cross-team collaboration.