Principal Security Engineer, AWS Security

We are looking for an experienced Principal Security Engineer to join the Security team in Australia. You will be on a team responsible for conducting both pre and post launch testing, offensive campaigns, emergent threat testing, creating/maintaining automated threat emulation solutions, and helping security and service teams add offensive insight to their development, deployment, monitoring, and response processes. This team partners with the larger Security organization and Service teams to continuously validate security throughout the service/system lifecycle., * Offering recommendations and fine-tuning findings to enhance threat mitigations, ensuring robust security measures are in place.

• Setting a high standard and generating high-quality testing plans and reports, striving for excellence in security testing procedures.
• Conducting offensive security testing and engaging in ongoing vulnerability research to proactively identify potential risks.
• Systematically identifying vulnerabilities and meticulously tracking them to facilitate timely remediation efforts.
• Staying ahead of emerging threats by continuously testing systems and applications for vulnerabilities that may arise.
• Developing and maintaining automated solutions for emulating threats, enhancing efficiency and accuracy in threat detection.
• Providing security training and conducting outreach sessions with internal development teams to raise awareness and foster a security-conscious culture.
• Developing comprehensive security guidance documentation, including policies, procedures, and best practices, to serve as a reference for the organization.
• Designing and building security tools tailored to the organization's needs, enhancing the overall security posture.
• Delivering meaningful security metrics to stakeholders and continuously improving the metrics for better insight into the security landscape.

Hold or be able to attain an Australian Government Security Vetting Agency clearance (see https://www1.defence.gov.au/security/clearances).

A day in the life Engineers in this role must show exemplary judgment in making technical trade-offs between short versus long term security and business goals. They must also demonstrate resilience and navigate difficult situations with composure and tact. Conflicts should be addressed by listening, finding the best way forward and persuading one's colleagues. Successful engineers in this role will regularly analyze their own performance with a critical eye. A broad understanding of the business and its interconnections is required. This position will also provide training, advice, and mentorship to other engineers.

• Minimum 10+ years of experience in delivering cyber security solutions to large enterprises or to Government customers.
• Proven ability to provide technical and strategic oversight for a high-performing team of security professionals.
• Demonstrated experience creating effective security strategies that balance prevention and detection, drive risk reduction and mitigation., * Bachelor's degree in Computer Science or Engineering.
• Master's degree or PhD in Cybersecurity or related domain.
• Worked on large-scale cloud programs to deliver security outcomes.