Principal Security Engineer, AWS Security

Principal Security Engineer, AWS Security

Job ID: | Amazon Web Services Australia Pty Ltd

This position can also be based in Sydney, Australia. We are looking for an experienced Principal Security Engineer to join the Security team in Australia. You will be on a team responsible for conducting both pre- and post-launch testing, offensive campaigns, emergent threat testing, and creating and maintaining automated threat emulation solutions. The role helps security and service teams add offensive insight to their development, deployment, monitoring, and response processes, partnering with the larger Security organization and Service teams to continuously validate security throughout the service/system lifecycle.

Key responsibilities:

• Offering recommendations and fine-tuning findings to enhance threat mitigations and ensure robust security measures.
• Setting a high standard and generating high-quality testing plans and reports, striving for excellence in security testing procedures.
• Conducting offensive security testing and engaging in ongoing vulnerability research to proactively identify potential risks.
• Systematically identifying vulnerabilities and meticulously tracking them to facilitate timely remediation efforts.
• Continuously testing systems and applications for emerging vulnerabilities.
• Developing and maintaining automated solutions for emulating threats, enhancing efficiency and accuracy in threat detection.
• Providing security training and outreach sessions with internal development teams to raise awareness and foster a security-conscious culture.
• Developing comprehensive security guidance documentation, including policies, procedures, and best practices.
• Designing and building security tools tailored to the organization’s needs.
• Delivering meaningful security metrics to stakeholders and continuously improving those metrics for better insight into the security landscape.

Other requirements:

• Hold or be able to attain an Australian Government Security Vetting Agency clearance.
• Excellent judgment in making technical trade-offs between short- versus long-term security and business goals.
• Strong conflict resolution skills and a collaborative mindset.
• Experience providing training, advice, and mentorship to other engineers.

Basic Qualifications

• Minimum 10+ years of experience delivering cyber security solutions to large enterprises or Government customers.
• Proven ability to provide technical and strategic oversight for a high-performing team of security professionals.
• Demonstrated experience creating effective security strategies that balance prevention and detection, drive risk reduction and mitigation.

Preferred Qualifications

• Bachelor’s degree in Computer Science or Engineering.
• Master’s degree or PhD in Cybersecurity or related domain.
• Experience on large-scale cloud programs delivering security outcomes.

Acknowledgement of country: Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

#J-18808-Ljbffr