Principal Security Engineer, AWS Secuirty...

Principal Security Engineer, AWS Security Job ID:
2780049 | Amazon Web Services Australia Pty Ltd This position can
also be based in Sydney, Australia. We are looking for an
experienced Principal Security Engineer to join the Security team
in Australia. You will be on a team responsible for conducting both
pre and post launch testing, offensive campaigns, emergent threat
testing, creating/maintaining automated threat emulation solutions,
and helping security and service teams add offensive insight to
their development, deployment, monitoring, and response processes.
This team partners with the larger Security organization and
Service teams to continuously validate security throughout the
service/system lifecycle. You will be an expert across multiple
domains such as cyber security; threat, vulnerability and risk
assessments (TVRA), security tools (e.g. Splunk, Crowstrike, etc.),
application of security frameworks (e.g. ISM, NIST, etc.) and/or
implementation and monitoring of cyber security controls (i.e.
detection, protection, alerting, etc.) and will be sought out for
advice on a range of technical and business related issues. Your
role will help ensure that our systems and processes are secured
against the latest threats and you will lead security testing of
large Amazon projects while setting standards and defining best
practices for the Security team. You will proactively share
knowledge across the Amazon community and will be a critical member
of the organization in one or more of the core areas of security.
Key job responsibilities 1. Offering recommendations and
fine-tuning findings to enhance threat mitigations, ensuring robust
security measures are in place. 2. Setting a high standard and
generating high-quality testing plans and reports, striving for
excellence in security testing procedures. 3. Conducting offensive
security testing and engaging in ongoing vulnerability research to
proactively identify potential risks. 4. Systematically identifying
vulnerabilities and meticulously tracking them to facilitate timely
remediation efforts. 5. Staying ahead of emerging threats by
continuously testing systems and applications for vulnerabilities
that may arise. 6. Developing and maintaining automated solutions
for emulating threats, enhancing efficiency and accuracy in threat
detection. 7. Providing security training and conducting outreach
sessions with internal development teams to raise awareness and
foster a security-conscious culture. 8. Developing comprehensive
security guidance documentation, including policies, procedures,
and best practices, to serve as a reference for the organization.
9. Designing and building security tools tailored to the
organization's needs, enhancing the overall security posture. 10.
Delivering meaningful security metrics to stakeholders and
continuously improving the metrics for better insight into the
security landscape. Hold or be able to attain an Australian
Government Security Vetting Agency clearance (see
https://www1.defence.gov.au/security/clearances). A day in the
life: Engineers in this role must show exemplary judgment in making
technical trade-offs between short versus long term security and
business goals. They must also demonstrate resilience and navigate
difficult situations with composure and tact. Conflicts should be
addressed by listening, finding the best way forward and persuading
one’s colleagues. Successful engineers in this role will regularly
analyze their own performance with a critical eye. A broad
understanding of the business and its interconnections is required.
This position will also provide training, advice, and mentorship to
other engineers. BASIC QUALIFICATIONS 1. Minimum 10+ years of
experience in delivering cyber security solutions to large
enterprises or Government customers. 2. Proven ability to provide
technical and strategic oversight for a high-performing team of
security professionals. 3. Demonstrated experience creating
effective security strategies that balance prevention and
detection, drive risk reduction and mitigation. PREFERRED
QUALIFICATIONS 1. Bachelor's degree in Computer Science or
Engineering. 2. Masters’ degree or PhD in Cybersecurity or related
domain. 3. Worked on large-scale cloud programs to deliver security
outcomes. Acknowledgement of country: In the spirit of
reconciliation Amazon acknowledges the Traditional Custodians of
country throughout Australia and their connections to land, sea and
community. We pay our respect to their elders past and present and
extend that respect to all Aboriginal and Torres Strait Islander
peoples today. IDE statement: Amazon is committed to a diverse and
inclusive workplace. Amazon is an equal opportunity employer, and
does not discriminate on the basis of race, national origin,
gender, gender identity, sexual orientation, disability, age, or
other legally protected attributes. Our inclusive culture empowers
Amazonians to deliver the best results for our customers. If you
have a disability and need a workplace accommodation or adjustment
during the application and hiring process, including support for
the interview or onboarding process, please visit
https://amazon.jobs/content/en/how-we-hire/accommodationsfor more
information. Posted: January 28, 2025 (Updated 1 day ago)
#J-18808-Ljbffr