Security Engineer, AWS Security

Amazon is hiring a Security Engineer, AWS Security in Melbourne, Australia. Level rates it ; you can apply on Amazon.

Level's read on this job

Little AI ●○○○ is how Level rates this cybersecurity role: aI is not part of the work.
Tools and skills the posting cites include SIEM, AWS and incident response.
Level classifies it as a mid-level role.
Level lists 20,000+ other open roles at Amazon.

AI in this role

Security Engineer responsible for threat hunting, incident response, and maintaining SIEM detections and security operations in AWS.

SIEMAWS

incident-responsethreat-huntingsecurity-operationslog-analysis

Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance, with the ability to successfully complete an Organisational Suitability Assessment. For more information regarding security clearances please visit (https://www.agsva.gov.au/)

Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure.

AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM).

Key job responsibilities
Key responsibilities may include:

Hold or be able to attain an Australian Government Security Vetting Agency clearance (see https://www1.defence.gov.au/security/clearances)

• Performing security event monitoring, incident management and response.

• Develop, tune, and maintain SIEM detections, dashboards, and correlation rules

• Conduct proactive threat hunting and analysis to identify suspicious behaviour

• Investigate, respond and be the escalation point for security alerts and incidents

• Support the integration and optimisation of security data sources within SIEM platforms

• Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP’s and runbooks.

• Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations.

• Perform on-call duties as required, out of business hours.

A day in the life
A typical day for a Security Engineer may involve

Responding to new detections: Monitor security alerts in real-time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed.

Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment.

Threat hunt: Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage.

Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components.

Generate metrics and dashboards: Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive-level reports summarizing security posture and trends, and build real-time dashboards for continuous monitoring of security operations effectiveness.

About the team
Diverse Experiences
AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no "perfect" security solutions and we develop and iterate using a continuous improvement process.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Mentorship & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Basic qualifications

- 3+ years experience as a SOC Analyst or Defensive Cyber Role.
- Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar).
- Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments.

Preferred qualifications

- Good working knowledge of foundational systems and protocols e.g HTTP, DNS, TCP/IP.
- Strong technical working knowledge of key security domains, e.g Cryptography, Identity & Access Management and Application Security.

Acknowledgement of country:
In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.

IDE statement:
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

How we rate this

Security Engineer, AWS Security at Amazon rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Security Engineer, AWS Security is an open job at Amazon.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in AU, VIC, Melbourne.
The job was posted on September 9, 2026.
Seniority: mid.
Applications are handled by Amazon. Apply on Amazon

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Incident ResponseThreat HuntingSecurity OperationsLog AnalysisSIEMAWS

Also common in cybersecurity jobs at this level

Python Azure Google Cloud Kubernetes Terraform Java

Pay

Typical cybersecurity job: $160k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

Tell me about a project where incident response was part of your work. What did you do?
Tell me about a project where threat hunting was part of your work. What did you do?
Tell me about a project where security operations was part of your work. What did you do?
Tell me about a project where log analysis was part of your work. What did you do?
Walk me through how you've used SIEM in your day-to-day work.

Adapt your resume

List these exact terms on your resume: Incident Response, Threat Hunting, Security Operations, Log Analysis, and SIEM. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get a free CV review Check your resume with the ATS resume checker