Security Engineering Lead, AWS Security
Amazon is hiring a Security Engineering Lead, AWS Security in Melbourne, Australia. Level rates it ; you can apply on Amazon.
Level's read on this job
- Little AI ●○○○ is how Level rates this role: aI is not part of the work.
- Tools and skills the posting cites include Splunk, Crowdstrike and AWS.
- Level classifies it as a lead role.
- Level lists 20,000+ other open roles at Amazon.
AI in this role
Security Engineering Lead to conduct threat testing, emulation, and implement security controls across AWS cloud infrastructure in Australia.
Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure.
AWS Security is looking for a Security Engineering Lead to join the team. You will be on a team responsible for conducting both pre and post launch testing, offensive campaigns, emergent threat modeling/testing, creating/maintaining automated threat emulation solutions, and helping security and service teams add offensive insight to their development, deployment, monitoring, and response processes. This team partners with the larger Security organisation and Service teams to continuously validate security throughout the service/system lifecycle.
You will be an expert across multiple domains such as cyber security; threat, vulnerability and risk assessments (TVRA), security tools (e.g. Splunk, Crowdstrike, etc.), application of security frameworks (e.g. PSPF, ISM, NIST, etc.) and/or implementation and monitoring of cyber security controls (i.e. detection, protection, alerting, etc.) and will be sought out for advice on a range of technical and business related issues. Your role will help ensure that our systems and processes are secured against the latest threats and you will lead security testing of large Amazon projects while setting standards and defining best practices for the AWS Security team. You will proactively share knowledge across the Amazon community and will be a critical member of the organisation in one or more of the core areas of security.
You will be expected to partner and align with other technical leaders and Principal Security Engineers from other geographic jurisdictions to leverage, extend and adapt critical security solution for the Australian region. You will collaborate closely with peers and other experts to deliver a sovereign security solution for Australia to address our country specific security controls.
Key job responsibilities
• Offering recommendations and fine-tuning findings to enhance threat mitigations, ensuring robust security measures are in place.
• Setting a high standard and generating high-quality testing plans and reports, striving for excellence in security testing procedures.
• Conducting offensive security testing and engaging in ongoing vulnerability research to proactively identify potential risks.
• Systematically identifying vulnerabilities and meticulously tracking them to facilitate timely remediation efforts.
• Staying ahead of emerging threats by continuously testing systems and applications for vulnerabilities that may arise.
• Developing and maintaining automated solutions for emulating threats, enhancing efficiency and accuracy in threat detection.
• Providing security training and conducting outreach sessions with internal development teams to raise awareness and foster a security-conscious culture.
• Developing comprehensive security guidance documentation, including policies, procedures, and best practices, to serve as a reference for the organization.
• Designing and building security tools tailored to the organization's needs, enhancing the overall security posture.
• Delivering meaningful security metrics to stakeholders and continuously improving the metrics for better insight into the security landscape.
A day in the life
Engineers in this role must show exemplary judgment in making technical trade-offs between short versus long term security and business goals. They must also demonstrate resilience and navigate difficult situations with composure and tact. Conflicts should be addressed by listening, finding the best way forward and persuading one’s colleagues. Successful engineers in this role will regularly analyze their own performance with a critical eye. A broad understanding of the AWS business and its interconnections is required. This position will also provide training, advice, and mentorship to other engineers throughout AWS.
About the team
Why Amazon Security
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no "perfect" security solutions and we develop and iterate using a continuous improvement process.
Diverse Experiences
AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why AWS?
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Mentorship & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
Basic qualifications
- Minimum 7+ years of experience in delivering cyber security solution to large enterprises or to Government customers.
- Efficient time management skills are required along with the ability to deliver results in the face of uncertainty.
- Proven ability to provide technical and strategic oversight for a high-performing team of security professionals.
- Demonstrated experience creating effective security strategies that balance prevention and detection, drive risk reduction and mitigation.
Preferred qualifications
- Masters’ degree or PhD in Cybersecurity or related domain.
- Worked on large-scale cloud programs to deliver security outcomes.
Acknowledgement of country:
In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.
IDE statement:
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
How we rate this
Security Engineering Lead, AWS Security at Amazon rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- Walk me through fine-tuning a model: what data did you use, and how did you check the result?
- Tell me about a project where cyber security was part of your work. What did you do?
- Tell me about a project where threat modeling was part of your work. What did you do?
- Tell me about a project where penetration testing was part of your work. What did you do?
- Tell me about a project where security controls was part of your work. What did you do?
Adapt your resume
- List these exact terms on your resume: Fine-tuning, Cyber Security, Threat Modeling, Penetration Testing, and Security Controls. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new software engineering jobs by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Software Engineering roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step