Sr Security Engineer, Region Services

G'day! You've found an opportunity that could define your next chapter.Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability Basic qualifications: - Experience leading and applying threat modelling activities using structured methodologies (e.g., STRIDE, CAPEC), translating findings into pragmatic risk mitigation approaches in code that enable service teams to launch securely - Experience owning security risk identification and mitigation outcomes beyond a single team, influencing security strategy across related teams and partner organisations - Experience driving application security outcomes end-to-end for service teams — from design reviews and security assessments through to measurable, sustained security risk reduction across a portfolio of services - Experience facilitating penetration testing engagements across service teams — guiding scoping, coordinating execution, and partnering with teams to interpret findings, prioritise remediation, and deliver security outcomes - Experience building mechanisms to identify, track, measure, and report on security program effectiveness — creating predictable process paths and reducing reliance on manual overhead Preferred: - Experience establishing or leading a Security Guardians (Developer's advocate) program (or equivalent distributed security ownership model) — training security ambassadors within builder teams to scale security reviews, reduce findings, and embed security earlier in the development lifecycle - 5+ years of coding or scripting experience (e.g., Java, Python, TypeScript, Rust) with the ability to review code for security deficiencies and guide builder teams on remediation - Experience identifying and resolving systemic security deficiencies that bottleneck innovation, driving security debt reduction across a diverse service portfolio through root cause analysis rather than tactical workarounds - Experience designing and implementing security automation — building paved paths and reusable mechanisms that deliver security outcomes with minimal builder friction and cost - Ability to interpret government security frameworks such as the Australian Government Information Security Manual (ISM) or Protective Security Policy Framework (PSPF) Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.