Security Engineer , Region Services

Amazon Web Services; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Amazon Web Services in Australia is seeking a Security Engineer for the Region Services team. You will lead security onboarding and assurance for region-specific cloud services, applying ISM/PSPF/DSPF frameworks and building scalable security controls for the sovereign cloud.

Based in Melbourne with relocation support, you will collaborate with more than 100 AWS service teams worldwide, own automation for evidence collection, and participate in on-call rotations to maintain operational readiness.

Qualifications

• Knowledge of industry-based security vulnerabilities and remediation techniques.
• Experience in scripting, programming, and security code reviewing in a common programming language.
• Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
• 3+ years of IT Security experience.

Responsibilities

• Lead security onboarding and assurance for region-specific cloud services, ensuring operational readiness.
• Engineer and automate security-control validation for cloud services and data-transfer pathways.
• Translate security requirements into technical baselines and measurable criteria with Australian frameworks.
• Develop reusable security tooling and automated evidence collection to streamline onboarding and audits.
• Investigate security events, determine root causes, and participate in on-call rotation.

Skills

Security onboarding

SRA knowledge

Cloud security

Scripting (Python/Java/C++)

Troubleshooting & logs

Security code reviews

Job description

G'day! You've found an opportunity that could define your next chapter.

Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at https://www.agsva.gov.au/.

Based in Melbourne - we offer relocation support for candidates moving other states.

The Mission - Why This Program, Why Now?

You're joining at the defining moment of one of the most significant technology programs Australia has ever undertaken. This program will build and operate the dedicated cloud giving Australia's national security community and its allies the capability to see more, share more, innovate and act faster than ever before.

The architectural decisions being made now - how we structure networking, implement security controls, and automate at scale - will shape how Australia's national security community operates for the next decade. You won't be inheriting someone else's design choices. You'll be making them.

Your Role - Security Engineer, Region Services

AWS Region Services delivers innovations ranging from foundational services, such as Amazon Simple Storage Service (Amazon S3) and Amazon Elastic Compute Cloud (Amazon EC2), to new products and features that distinguish AWS in the industry. As a member of Region Services, you will contribute to the security and operational management of AWS compute, database, storage, Internet of Things (IoT), platform and productivity application services, including supporting customers that require specialised security solutions for their cloud environments.

Our Region Services team redefines how AWS designs, builds and operates AWS Regions, enabling new cloud infrastructure and service offerings for customers of all sizes across every industry, including start-ups, enterprises and public sector organisations.

AWS Region Services is recruiting Security Engineers to lead and contribute to the onboarding and assurance of regional cloud services in Australia. Successful candidates will be analytical problem-solvers who take ownership of complex technical and security challenges. They will have a strong understanding of security risk assessment (SRA), cloud-native technologies and software development, as well as experience with enterprise gateways and data-transfer solutions. This unique team provides opportunities to work with more than 100 AWS commercial service teams globally.

Are you ready to be the person Australia's national security community trusts to get this right?

Key job responsibilities

• Lead security onboarding and assurance for region-specific cloud services, designing scalable mechanisms that ensure the operational readiness of regional AWS infrastructure.
• Engineer and automate security-control validation for cloud services and data-transfer pathways, including reviews of technical designs, architectures, code, configurations, documentation and structured data schemas (JSON, JSON Schema, XML, XSD, XSLT, XPath).
• Partner with service teams and customers to translate security requirements into technical baselines, control objectives, implementation patterns and measurable acceptance criteria aligned with Australian security frameworks such as the ISM, PSPF and DSPF.
• Develop reusable security tooling, automated evidence collection and reporting mechanisms that reduce manual effort and improve the consistency of service onboarding, assurance and audit engagements across AWS environments.
• Investigate security events and non-conformance, determine root causes, implement durable corrective solutions through automation, and participate in the on-call rotation to support continuous operational readiness.

A day in the life

Your day balances strategic security oversight with hands-on engineering. You review service designs, structured data schemas and security submissions; automate control validation and evidence collection; conduct onboarding assessments for regional cloud services; and work with service teams to establish security baselines and control objectives. You may also lead assessments of data-flow controls, investigate instances of non-conformance and engineer durable remediation across AWS environments.

You partner with global service teams to improve products and security mechanisms, develop reusable tooling and patterns, and manage feature requests. You communicate security outcomes to diverse stakeholders, maintain customer-facing documentation and participate in the on-call rotation to support the continuous operational readiness of regional infrastructure.

About the team

Our Region Services security team is responsible for ensuring that every AWS service onboarded into Australia's dedicated sovereign cloud meets the security bar required by the national security community. We work across more than 100 AWS commercial service teams globally, giving you exposure to a breadth of cloud technologies and security challenges that few teams can match. Our engineers build automated assurance tooling, define security baselines against Australian government frameworks and act as trusted advisors to both internal builders and external customers.

We are a collaborative, technically driven group that values clear documentation, peer review and continuous improvement. As the programme scales, you will help shape our security engineering practices and contribute to the long-term vision of secure, reliable cloud infrastructure for Australia's most critical missions.

Basic qualifications

• Knowledge of industry-based security vulnerabilities and remediation techniques
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
• Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• 3+ years of IT Security experience

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Acknowledgement of country:

In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.

IDE statement:

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.