> Markdown version of [/jobs/ext/3036920-security-engineer-aws-security](https://www.wearedevelopers.com/jobs/ext/3036920-security-engineer-aws-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer, AWS Security - **Company:** Amazon.com, Inc. - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cyber Security, Computer Networks, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Identity and Access Management, Intrusion Detection and Prevention, Service Pack, Security Information and Event Management, TCP/IP, System Availability, Software Security, Mitre Att&ck, Cyber Threat Analysis, Microsoft Sentinel, Sumo Logic (Software), Splunk - **Published:** September 23, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9184397/security-engineer-aws-security ## About the Role Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance, with the ability to successfully complete an Organisational Suitability Assessment. For more information regarding security clearances please visit (https://www.agsva.gov.au/), 3+ years experience as a SOC Analyst or Defensive Cyber Role. - Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar). - Good understanding of incident response, threat detection, and security monitoring. - Good working knowledge of foundational systems and protocols e.g HTTP, DNS, TCP/IP. - Excellent analytical, problem-solving, and communication skills. Preferred Qualifications - 5+ years experience as a SOC Analyst or Defensive Cyber Role. - Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments. - Strong technical working knowledge of key security domains, e.g Cryptography, Identity & Access Management and Application Security. - Experience with AWS products and services ## Description AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM)., Hold or be able to attain an Australian Government Security Vetting Agency clearance (see https://www1.defence.gov.au/security/clearances) * Performing security event monitoring, incident management and response. * Develop, tune, and maintain SIEM detections, dashboards, and correlation rules * Conduct proactive threat hunting and analysis to identify suspicious behaviour * Investigate, respond and be the escalation point for security alerts and incidents * Support the integration and optimisation of security data sources within SIEM platforms * Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP's and runbooks. * Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations. * Perform on-call duties as required, out of business hours. A day in the life A typical day for a Security Engineer may involve Responding to new detections: Monitor security alerts in real-time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed. Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment. Threat hunt: Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage. Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components. Generate metrics and dashboards: Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive-level reports summarizing security posture and trends, and build real-time dashboards for continuous monitoring of security operations effectiveness. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Debunking the Top 10 Myths about Web 3](https://www.wearedevelopers.com/videos/634-debunking-the-top-10-myths-about-web-3) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)