The posting
G'day! You've found an opportunity that could define your next chapter.
Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at https://www.agsva.gov.au/.
Based in Melbourne - we offer relocation support for candidates moving other states.
The Mission - Why This Program, Why Now?
You're joining at the defining moment of one of the most significant technology programs Australia has ever undertaken. This program will build and operate the dedicated cloud giving Australia's national security community and its allies the capability to see more, share more, innovate and act faster than ever before.
The architectural decisions being made now - how we structure networking, implement security controls, and automate at scale - will shape how Australia's national security community operates for the next decade. You won't be inheriting someone else's design choices. You'll be making them.
Your Role - Security Engineer, Region Services
AWS Region Services delivers innovations ranging from foundational services, such as Amazon Simple Storage Service (Amazon S3) and Amazon Elastic Compute Cloud (Amazon EC2), to new products and features that distinguish AWS in the industry. As a member of Region Services, you will contribute to the security and operational management of AWS compute, database, storage, Internet of Things (IoT), platform and productivity application services, including supporting customers that require specialised security solutions for their cloud environments.
Our Region Services team redefines how AWS designs, builds and operates AWS Regions, enabling new cloud infrastructure and service offerings for customers of all sizes across every industry, including start-ups, enterprises and public sector organisations.
AWS Region Services is recruiting Security Engineers to lead and contribute to the onboarding and assurance of regional cloud services in Australia. Successful candidates will be analytical problem-solvers who take ownership of complex technical and security challenges. They will have a strong understanding of security risk assessment (SRA), cloud-native technologies and software development, as well as experience with enterprise gateways and data-transfer solutions. This unique team provides opportunities to work with more than 100 AWS commercial service teams globally.
Are you ready to be the person Australia's national security community trusts to get this right?
Key job responsibilities You'll be the security authority that bridges global AWS innovation with Australia's sovereign requirements — and the impact of your work will be felt across an entire nation's security apparatus.
• Lead security onboarding and assurance for region-specific cloud services, designing scalable mechanisms that ensure the operational readiness of regional AWS infrastructure. • Engineer and automate security-control onboarding and validation for cloud services and data-transfer pathways using scalable checks and risk-reduction mechanisms. • Review technical designs, architectures, code, configurations, technical documentation and structured data schemas and transformations (JSON, JSON Schema, XML, XSD, XSLT and XPath), providing actionable engineering guidance to meet regional security requirements. • Partner with service teams and customers to translate security requirements into technical baselines, control objectives, implementation patterns and measurable acceptance criteria. • Develop reusable security tooling and mechanisms that reduce manual effort and improve the consistency of service onboarding and assurance. • Automate security evidence collection, control testing, policy validation and reporting across AWS environments. • Lead security assessments of data-flow controls, integrating automated assurance with audit frameworks and continuous monitoring. • Engineer and maintain secure data-transfer patterns, guardrails and reference implementations for services operating in the region. • Build and maintain security metrics, dashboards and alarms to measure control effectiveness, identify risks and detect non-conformance. • Investigate security events and instances of non-conformance, determine root causes and implement durable corrective and preventive solutions through automation. • Evaluate and apply generative AI, AI agents and multi-agent workflows to modernise security engineering processes while maintaining appropriate security controls and human oversight. • Develop customer-facing technical documentation and provide strategic security guidance to customers, engineers and service teams. • Work with global service teams to identify product improvements, design scalable solutions and manage security feature requests. • Deliver maintainable, well-documented engineering solutions under tight deadlines, with a high standard of accuracy and operational excellence. • Participate in the on-call rotation and improve operational mechanisms based on lessons learned from security events. • Interpret and apply Australian security frameworks, including the ISM, PSPF and DSPF, to engineer security baselines and controls that achieve the required security posture.
A day in the life Your day balances strategic security oversight with hands-on engineering. You review service designs, structured data schemas and security submissions; automate control validation and evidence collection; conduct onboarding assessments for regional cloud services; and work with service teams to establish security baselines and control objectives. You may also lead assessments of data-flow controls, investigate instances of non-conformance and engineer durable remediation across AWS environments.
You partner with global service teams to improve products and security mechanisms, develop reusable tooling and patterns, and manage feature requests. You communicate security outcomes to diverse stakeholders, maintain customer-facing documentation and participate in the on-call rotation to support the continuous operational readiness of regional infrastructure.
About the team AWS Region Services provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2) to consistently released new product innovations that continue to set AWS's services and features apart in the industry. As a member of Region Services, you will contribute to the security and operational management of Compute, Database, Storage, Internet of Things (Iot), Platform, and Productivity Apps services in AWS, including support for customers who require specialised security solutions for their cloud services.
Our Region Services team redefines the way AWS designs, builds, and operates AWS regions to enable new AWS Cloud Infrastructure and Services offerings to customers across every industry and of every size, including start-ups, enterprises, and public sector organisations.
Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.
Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
Benefits - Learning & development - AWS training and certification support, access to internal learning platforms. - Health, income protection and life cover - Amazon subsidises private health insurance premiums, and group salary continuance and life insurance are included at no cost to you. - Military differential pay launching in Australia - Australian employees taking defence reserve leave may receive up to 52 weeks of military differential pay to help cover the difference in pay while serving. - Employee Assistance Program - Free, confidential support 24 hours a day, 7 days a week for you and your family - mental health, financial coaching, legal questions, and everyday life events. - Family-building benefit - Access to Maven for fertility treatment, adoption support, surrogacy, and parenting coaching. - Amazon Extras & employee discount - cashback and discounts across hundreds of retail, fitness, travel, and lifestyle partners.
- Knowledge of industry-based security vulnerabilities and remediation techniques - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) - Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience) - 3+ years of IT Security experience - Experience securing cloud software services and understanding design for scalability, performance and reliability - Experience in identifying security issues and risks, and developing mitigation plans
- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing - Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure - Experience in one or more of the following: Big Data, DevOps, Security, Systems Administration, software development, cloud technology - Experience with automation and any version control tools, or experience with threat modeling and penetration testing and experience in Kafka - Experience working directly with security and engineering teams
Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.
IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
