National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Principal Security Engineer, AWS Security...

Amazon
London
4 weeks ago
Applications closed

Related Jobs

View all jobs

Principal Security Engineer, AWS Managed Services (AMS)

Principal Security Engineer

Principal Security Engineer

Principal Security Engineer

Principal Geospatial Data Engineer

Senior Cloud Security Engineer

Principal Security Engineer, AWS Security

Job ID: 2780049 | Amazon Web Services Australia Pty Ltd

This position can also be based in Sydney, Australia.

We are looking for an experienced Principal Security Engineer to join the Security team in Australia. You will be on a team responsible for conducting both pre and post launch testing, offensive campaigns, emergent threat testing, creating/maintaining automated threat emulation solutions, and helping security and service teams add offensive insight to their development, deployment, monitoring, and response processes. This team partners with the larger Security organization and Service teams to continuously validate security throughout the service/system lifecycle.

You will be an expert across multiple domains such as cyber security; threat, vulnerability and risk assessments (TVRA), security tools (e.g. Splunk, Crowstrike, etc.), application of security frameworks (e.g. ISM, NIST, etc.) and/or implementation and monitoring of cyber security controls (i.e. detection, protection, alerting, etc.) and will be sought out for advice on a range of technical and business related issues. Your role will help ensure that our systems and processes are secured against the latest threats and you will lead security testing of large Amazon projects while setting standards and defining best practices for the Security team. You will proactively share knowledge across the Amazon community and will be a critical member of the organization in one or more of the core areas of security.

Key job responsibilities:

  1. Offering recommendations and fine-tuning findings to enhance threat mitigations, ensuring robust security measures are in place.
  2. Setting a high standard and generating high-quality testing plans and reports, striving for excellence in security testing procedures.
  3. Conducting offensive security testing and engaging in ongoing vulnerability research to proactively identify potential risks.
  4. Systematically identifying vulnerabilities and meticulously tracking them to facilitate timely remediation efforts.
  5. Staying ahead of emerging threats by continuously testing systems and applications for vulnerabilities that may arise.
  6. Developing and maintaining automated solutions for emulating threats, enhancing efficiency and accuracy in threat detection.
  7. Providing security training and conducting outreach sessions with internal development teams to raise awareness and foster a security-conscious culture.
  8. Developing comprehensive security guidance documentation, including policies, procedures, and best practices, to serve as a reference for the organization.
  9. Designing and building security tools tailored to the organization's needs, enhancing the overall security posture.
  10. Delivering meaningful security metrics to stakeholders and continuously improving the metrics for better insight into the security landscape.

    Hold or be able to attain an Australian Government Security Vetting Agency clearance (seehttps://www1.defence.gov.au/security/clearances).

    A day in the life:
    Engineers in this role must show exemplary judgment in making technical trade-offs between short versus long term security and business goals. They must also demonstrate resilience and navigate difficult situations with composure and tact. Conflicts should be addressed by listening, finding the best way forward and persuading one’s colleagues. Successful engineers in this role will regularly analyze their own performance with a critical eye. A broad understanding of the business and its interconnections is required. This position will also provide training, advice, and mentorship to other engineers.

    BASIC QUALIFICATIONS

  • Minimum 10+ years of experience in delivering cyber security solution to large enterprises or to Government customers.
  • Proven ability to provide technical and strategic oversight for a high-performing team of security professionals.
  • Demonstrated experience creating effective security strategies that balance prevention and detection, drive risk reduction and mitigation.

    PREFERRED QUALIFICATIONS

  • Bachelor's degree in Computer Science or Engineering.
  • Masters’ degree or PhD in Cybersecurity or related domain.
  • Worked on large-scale cloud programs to deliver security outcomes.

    Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer, and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, disability, age, or other legally protected attributes.

    Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visithttps://amazon.jobs/content/en/how-we-hire/accommodationsfor more information.

    Amazon is an Equal Opportunity Employer – Minority / Women / Disability / Veteran / Gender Identity / Sexual Orientation / Age.

    #J-18808-Ljbffr
National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Jobs Skills Radar 2026: Emerging Frameworks, Tools & Certifications to Learn Now

Cyber threats are evolving—and so must the people defending against them. As ransomware, AI-enhanced phishing, and supply chain attacks grow more advanced, UK employers are urgently hiring cyber security professionals with the right mix of strategic and hands-on skills. Welcome to the Cyber Security Jobs Skills Radar 2026, your go-to guide for the most in-demand tools, frameworks, certifications, and technologies shaping the UK's cyber workforce. Whether you're a SOC analyst, penetration tester, or cloud security architect, this annual radar is designed to help you stay ahead of the market.

How to Find Hidden Cyber Security Jobs in the UK Using Professional Bodies like BCS, CIISec & More

The demand for skilled cyber security professionals in the UK has never been higher. With threats increasing in sophistication and frequency, organisations are urgently hiring ethical hackers, threat analysts, GRC specialists, and security architects. But many of the most valuable roles—particularly in government, defence, and critical infrastructure—are never publicly advertised. Instead, these jobs are shared behind the scenes through trusted networks, private communities, and professional bodies. In this article, we explore how to uncover hidden cyber security jobs in the UK using organisations like the BCS (The Chartered Institute for IT), CIISec (The Chartered Institute of Information Security), ISACA, and ISC² UK Chapter. We’ll show you how to use membership directories, special interest groups, CPD events and informal networks to gain early access to roles most people never see.

How to Get a Better Cyber Security Job After a Lay-Off or Redundancy

Redundancy is never easy—especially in a fast-moving field like cyber security, where your skills and experience are constantly evolving. But if you’ve recently been made redundant from a cyber security role, know this: the UK cyber workforce remains in high demand, and your expertise is more valuable than ever. Whether you’re a SOC analyst, penetration tester, incident responder, security architect or GRC specialist, there are still thousands of opportunities across sectors including finance, defence, government, retail, and critical infrastructure. This guide will help you turn redundancy into a career relaunch, with a clear action plan tailored to the UK cyber security job market.