Cloud Security & Compliance Engineer

AMAZON WEB SERVICES SINGAPORE PRIVATE LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

AWS Security Assurance Services is seeking a Security & Compliance Engineer to design, build, and deploy AWS security and compliance solutions for highly regulated customers in Singapore. You will own engineering deliverables across secure design, implementation, testing, deployment, and maintenance, translating SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP into secure AWS implementations.

You will write code, ship custom controls, run security investigations, lead design and code reviews,

Qualifications

• 3+ years of programming in Python, Ruby, Go, Java, .Net, C++ or similar
• 3+ years of scripting, programming, and security code review
• Knowledge of networking protocols (HTTP, DNS, TCP/IP)
• Experience with threat modeling or risk identification techniques

Responsibilities

• Lead threat modeling, design reviews and architecture reviews for customer engagements
• Design and implement custom preventive, detective, and proactive controls (SCPs, RCPs, policy-as-code)
• Build secure-by-design IaC controls for Landing Zones and AWS architectures
• Apply AWS security best practices for authentication, data handling, encryption, least privilege
• Write and review IaC, scripts, enforcements and detections in Python, Terraform, CDK, CloudFormation and Rego
• Develop continuous compliance monitoring and audit-ready evidence pipelines
• Integrate custom controls with AWS-native and third-party tools
• Travel to customer sites as needed

Skills

Threat modeling

Security design reviews

Proficient in secure coding

CI/CD security pipelines

Technical writing

Tools

Terraform

AWS CDK

CloudFormation

OPA Rego

Cfn-Guard

Job description

AWS Security Assurance Services is seeking a Security & Compliance Engineer to design, build, and deploy AWS security and compliance solutions for highly regulated customers in Singapore. You will own engineering deliverables across secure design, implementation, testing, deployment, and maintenance, translating SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP into secure AWS implementations.

You will write code, ship custom controls, run security investigations, lead design and code reviews,