Sr security engineer, region services

G'day! You've found an opportunity that could define your next chapter.

Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at https://www.agsva.gov.au/.

You're joining at the defining moment of one of the most significant technology programmes Australia has ever undertaken. This programme will build and operate the dedicated cloud giving Australia's national security community and its allies the capability to see more, share more, innovate and act faster than ever before.

The architectural decisions being made now - how we structure networking, implement security controls, and automate at scale - will shape how Australia's national security community operates for the next decade. You won't be inheriting someone else's design choices. You'll be making them.

Your Role — The Security Engineering Lead

Imagine being the person who defines how security is woven into the fabric of an entire portfolio of services — not as an afterthought, but as a foundational principle. As our Senior Security Engineer, you'll be the driving force behind a new era of distributed security ownership, building a model where security isn't siloed but embedded in the DNA of every builder team.

You'll own threat modelling across critical services, lead the resolution of complex security challenges, and architect application security outcomes from secure design through code review. But this role goes beyond technical mastery — you'll be the Developer Advocate for Security, establishing and leading the Security Guardians programme that trains, mentors, and empowers security champions across systems engineering teams.

You will influence security strategy across partner organisations, communicate risk to senior leadership, and help builder teams navigate the intersection of speed and security with pragmatic, mission‐focused guidance. You'll also be at the forefront of accelerating Generative AI proficiency across engineering teams — shaping how the next generation of builders thinks about security in an AI‐augmented world.

Key Job Responsibilities

• Architect security outcomes across a portfolio of services that directly underpin Australia's national security capability.
• Own threat modelling using structured methodologies like STRIDE and CAPEC, translating complex threat landscapes into pragmatic mitigation strategies that empower teams to build securely and ship confidently.
• Establish and lead the Security Guardians programme — identifying, training, and mentoring security ambassadors embedded within builder teams, creating a multiplier effect that scales security knowledge far beyond what any single engineer could achieve alone.
• Drive outcomes end‐to‐end — from design reviews and security assessments through penetration testing coordination and remediation tracking.
• Review code, scripts, and detection mechanisms, innovating on resolutions that others can learn from and replicate.
• Construct security and system runbooks for new problem domains, transforming expertise into repeatable, scalable frameworks.
• Mentor system engineers and builders, growing their ability to deliver security outcomes independently.
• Guide teams through priority decisions and pragmatic risk management when the pressure is on.
• Communicate security risk and design decisions with clarity and conviction to senior leadership and customers, and accelerate builder proficiency in Generative AI through targeted education and hands‐on guidance.

A Day in the Life

Morning: Review a threat model for a service nearing its next major release, mapping attack surfaces using STRIDE, identifying gaps and crafting mitigation recommendations.

Mid‐morning: Lead a Security Guardians session coaching a cohort of embedded security champions through a real‐world scenario.

After lunch: Dive into a complex security finding, review code, collaborate with the service team to design a resolution that becomes a pattern documented in a runbook.

Later: Participate in a design review with senior leadership, translating technical risk into business language, and pair with a junior engineer on a secure code review.

Occasionally, participate in on‐call rotations to handle out‐of‐hours incidents.

About The Team

The AWS Region Services team combines AWS global cloud leadership with Australian security expertise to deliver highly secure, scalable environments for sensitive workloads. We're creating innovative ways to use cloud computing, artificial intelligence, and machine learning while maintaining the highest standards of security and operational excellence.

The Engineering organisation within Region Services is structured across core capability pillars: Compute & Machine Learning, Security Identity & Compliance, Storage & Databases, and a growing capability domain. Collectively these pillars encompass a team of varying technical skillsets, including Engineers; Technical Program Managers and Subject Matter Experts, organised into focused sub‐teams.

Benefits

• Learning & development - AWS training and certification support, access to internal learning platforms.
• Health, income protection and life cover - Amazon subsidises private health insurance premiums, and group salary continuance and life insurance are included at no cost to you.
• Military differential pay launching in Australia - Australian employees taking defence reserve leave may receive up to 52 weeks of military differential pay to help cover the difference in pay while serving.
• Employee Assistance Program - Free, confidential support 24 hours a day, 7 days a week for you and your family - mental health, financial coaching, legal questions, and everyday life events.
• Family‐building benefit - Access to Maven for fertility treatment, adoption support, surrogacy, and parenting coaching.
• Amazon Extras & employee discount - cashback and discounts across hundreds of retail, fitness, travel, and lifestyle partners.

Basic Qualifications

• Experience leading and applying threat modelling activities using structured methodologies (e.g., STRIDE, CAPEC), translating findings into pragmatic risk mitigation approaches in code that enable service teams to launch securely.
• Experience owning security risk identification and mitigation outcomes beyond a single team, influencing security strategy across related teams and partner organisations.
• Experience driving application security outcomes end‐to‐end for service teams — from design reviews and security assessments through to measurable, sustained security risk reduction across a portfolio of services.
• Experience facilitating penetration testing engagements across service teams — guiding scoping, coordinating execution, and partnering with teams to interpret findings, prioritise remediation, and deliver security outcomes.
• Experience building mechanisms to identify, track, measure, and report on security program effectiveness — creating predictable process paths and reducing reliance on manual overhead.

Preferred Qualifications

• Experience establishing or leading a Security Guardians (Developer's advocate) program (or equivalent distributed security ownership model) — training security ambassadors within builder teams to scale security reviews, reduce findings, and embed security earlier in the development lifecycle.
• 5+ years of coding or scripting experience (e.g., Java, Python, TypeScript, Rust) with the ability to review code for security deficiencies and guide builder teams on remediation.
• Experience identifying and resolving systemic security deficiencies that bottleneck innovation, driving security debt reduction across a diverse service portfolio through root cause analysis rather than tactical workarounds.
• Experience designing and implementing security automation — building paved paths and reusable mechanisms that deliver security outcomes with minimal builder friction and cost.
• Ability to interpret government security frameworks such as the Australian Government Information Security Manual (ISM) or Protective Security Policy Framework (PSPF).

Acknowledgement Of Country

In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.

IDE Statement

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.

Company: Amazon Web Services Australia Pty Ltd

Job ID: A10446861