Senior Security Engineer

G'day! You've found an opportunity that could define your next chapter. Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment.

The Mission - Why This Programme, Why Now? You're joining at the defining moment of one of the most significant technology programmes Australia has ever undertaken. This programme will build and operate the dedicated cloud giving Australia's national security community and its allies the capability to see more, share more, innovate and act faster than ever before. The architectural decisions being made now - how we structure networking, implement security controls, and automate at scale - will shape how Australia's national security community operates for the next decade.

Your Role — The Security Engineering Lead: Imagine being the person who defines how security is woven into the fabric of an entire portfolio of services — not as an afterthought, but as a foundational principle. As our Senior Security Engineer, you'll be the driving force behind a new era of distributed security ownership, building a model where security isn't siloed but embedded in the DNA of every builder team. You'll own threat modelling across critical services, lead the resolution of complex security challenges, and architect application security outcomes from secure design through code review.

Key job responsibilities:

• You'll be the architect of security outcomes across a portfolio of services that directly underpin Australia's national security capability.
• You'll own threat modelling using structured methodologies like STRIDE and CAPEC, translating complex threat landscapes into pragmatic mitigation strategies.
• You'll establish and lead the Security Guardians programme — identifying, training, and mentoring security ambassadors embedded within builder teams.
• When complex security challenges arise, you'll drive outcomes end-to-end — from design reviews and security assessments through penetration testing coordination and remediation tracking.
• You'll influence security strategy across related teams and partner organisations, ensuring consistency and raising the collective bar.
• You'll mentor system engineers and builders, growing their ability to deliver security outcomes independently.
• You'll communicate security risk and design decisions with clarity and conviction to senior leadership and customers.

A day in the life: Your morning begins with a threat model review for a service nearing its next major release. You're mapping attack surfaces using STRIDE, identifying gaps that others missed, and crafting mitigation recommendations. Mid-morning, you're running a Security Guardians session — coaching a cohort of embedded security champions through a real-world scenario. After lunch, a complex security finding lands on your desk. You dive into code, review detection mechanisms, and collaborate with the service team to design a resolution. Later, you're in a design review with senior leadership, translating technical risk into business language.

About The Team: The AWS Region Services team combines AWS global cloud leadership with Australian security expertise to deliver highly secure, scalable environments for sensitive workloads. We’re creating innovative ways to use cloud computing, artificial intelligence, and machine learning while maintaining the highest standards of security and operational excellence.

Diverse Experiences: Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply.

Why AWS: Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating.

Work/Life Balance: We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home.

Inclusive Team Culture: AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people.

Mentorship and Career Growth: We’re continuously raising our performance bar as we strive to become Earth’s Best Employer.

Benefits: Learning & development - AWS training and certification support, access to internal learning platforms. Health, income protection and life cover - Amazon subsidises private health insurance premiums.

Basic Qualifications: Experience leading and applying threat modelling activities using structured methodologies (e.g., STRIDE, CAPEC). Experience owning security risk identification and mitigation outcomes beyond a single team.

Preferred Qualifications: Experience establishing or leading a Security Guardians programme. 5+ years of coding or scripting experience (e.g., Java, Python, TypeScript, Rust).

Acknowledgement Of Country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community.

IDE Statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.