Security Engineer , Region Services

Amazon; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

AWS Region Services in Australia is recruiting Security Engineers to lead and contribute to the onboarding and assurance of regional cloud services. You will be responsible for security risk assessment, cloud-native technologies, and automation to support the national security community.

Successful candidates will have strong analytical skills, experience with enterprise gateways and data-transfer solutions, and be willing to participate in on-call rotations to ensure continuous operational

Qualifications

• Knowledge of industry-based security vulnerabilities and remediation techniques.
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
• Experience in troubleshooting systems issues, analysing logs, or automating basic tasks using command line tools (non-internship experience)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• 3+ years of IT Security experience

Responsibilities

• Lead security onboarding and assurance for region-specific cloud services, designing scalable mechanisms that ensure the operational readiness of regional AWS infrastructure.
• Engineer and automate security-control validation for cloud services and data-transfer pathways, including reviews of technical designs, architectures, code, configurations, documentation and structured data schemas (JSON, JSON Schema, XML, XSD, XSLT, XPath).
• Partner with service teams and customers to translate security requirements into technical baselines, control objectives, implementation patterns and measurable acceptance criteria aligned with Australian security frameworks such as the ISM, PSPF and DSPF.
• Develop reusable security tooling, automated evidence collection and reporting mechanisms that reduce manual effort and improve the consistency of service onboarding, assurance and audit engagements across AWS environments.
• Investigate security events and non-conformance, determine root causes, implement durable corrective solutions through automation, and participate in the on-call rotation to support continuous operational readiness.

Skills

Security risk assessment (SRA)

Cloud-native tech

Software development

Enterprise gateways

Data-transfer solutions

Job description

G'day! You've found an opportunity that could define your next chapter.

Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at https://www.agsva.gov.au/.

Based in Melbourne - we offer relocation support for candidates moving other states.

The Mission - Why This Program, Why Now?

You're joining at the defining moment of one of the most significant technology programs Australia has ever undertaken. This program will build and operate the dedicated cloud giving Australia's national security community and its allies the capability to see more, share more, innovate and act faster than ever before.

The architectural decisions being made now - how we structure networking, implement security controls, and automate at scale - will shape how Australia's national security community operates for the next decade. You won't be inheriting someone else's design choices. You'll be making them.

Your Role - Security Engineer, Region Services

AWS Region Services delivers innovations ranging from foundational services, such as Amazon Simple Storage Service (Amazon S3) and Amazon Elastic Compute Cloud (Amazon EC2), to new products and features that distinguish AWS in the industry. As a member of Region Services, you will contribute to the security and operational management of AWS compute, database, storage, Internet of Things (IoT), platform and productivity application services, including supporting customers that require specialised security solutions for their cloud environments.

Our Region Services team redefines how AWS designs, builds and operates AWS Regions, enabling new cloud infrastructure and service offerings for customers of all sizes across every industry, including start-ups, enterprises and public sector organisations.

AWS Region Services is recruiting Security Engineers to lead and contribute to the onboarding and assurance of regional cloud services in Australia. Successful candidates will be analytical problem-solvers who take ownership of complex technical and security challenges. They will have a strong understanding of security risk assessment (SRA), cloud-native technologies and software development, as well as experience with enterprise gateways and data-transfer solutions. This unique team provides opportunities to work with more than 100 AWS commercial service teams globally.

Are you ready to be the person Australia's national security community trusts to get this right?

Key job responsibilities

• Lead security onboarding and assurance for region-specific cloud services, designing scalable mechanisms that ensure the operational readiness of regional AWS infrastructure.
• Engineer and automate security-control validation for cloud services and data-transfer pathways, including reviews of technical designs, architectures, code, configurations, documentation and structured data schemas (JSON, JSON Schema, XML, XSD, XSLT, XPath).
• Partner with service teams and customers to translate security requirements into technical baselines, control objectives, implementation patterns and measurable acceptance criteria aligned with Australian security frameworks such as the ISM, PSPF and DSPF.
• Develop reusable security tooling, automated evidence collection and reporting mechanisms that reduce manual effort and improve the consistency of service onboarding, assurance and audit engagements across AWS environments.
• Investigate security events and non-conformance, determine root causes, implement durable corrective solutions through automation, and participate in the on-call rotation to support continuous operational readiness.

A day in the life
Your day balances strategic security oversight with hands-on engineering. You review service designs, structured data schemas and security submissions; automate control validation and evidence collection; conduct onboarding assessments for regional cloud services; and work with service teams to establish security baselines and control objectives. You may also lead assessments of data-flow controls, investigate instances of non-conformance and engineer durable remediation across AWS environments.

You partner with global service teams to improve products and security mechanisms, develop reusable tooling and patterns, and manage feature requests. You communicate security outcomes to diverse stakeholders, maintain customer-facing documentation and participate in the on-call rotation to support the continuous operational readiness of regional infrastructure.

About the team

Our Region Services security team is responsible for ensuring that every AWS service onboarded into Australia's dedicated sovereign cloud meets the security bar required by the national security community. We work across more than 100 AWS commercial service teams globally, giving you exposure to a breadth of cloud technologies and security challenges that few teams can match. Our engineers build automated assurance tooling, define security baselines against Australian government frameworks and act as trusted advisors to both internal builders and external customers.

We are a collaborative, technically driven group that values clear documentation, peer review and continuous improvement. As the programme scales, you will help shape our security engineering practices and contribute to the long-term vision of secure, reliable cloud infrastructure for Australia's most critical missions.

• Knowledge of industry-based security vulnerabilities and remediation techniques
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
• Experience in troubleshooting systems issues, analysing logs, or automating basic tasks using command line tools (non-internship experience)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• 3+ years of IT Security experience