AI-Driven Cloud Security & Compliance Engineer

Amazon Web Services (AWS); Houston (TX); On-site; USD 178,400 - 226,700; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

AWS Security Assurance Services LLC is hiring a Senior Security & Compliance Engineer to lead the design, deployment, and implementation of complex AWS security and compliance solutions that accomplish customer-defined business and security outcomes.

You will build custom security controls, AI-enabled automation and tooling, translate frameworks into secure-by-design implementations on AWS, write code, lead reviews, and own security risk identification and mitigation across teams.

Qualifications

• Bachelor's degree in CS, engineering, mathematics or STEM.
• 5+ years identifying security issues and mitigation plans.
• 4+ years scripting, programming and security code review.
• 4+ years cloud architecture or government security clearance (top secret) a plus.

Responsibilities

• Own design and architecture for security/compliance automation for regulated customers.
• Engineer and lead AI-enabled automations and threat modeling.
• Build secure-by-design IaC modules for Landing Zones and Zero-Trust.
• Lead deployment of AWS security controls and remediation at scale.
• Write and review scripts and IaC (Python, Terraform, AWS CDK, CloudFormation, Rego).
• Communicate risk and design decisions to technical and executive audiences.

Skills

Python

Java

Go

Terraform

CloudFormation

AWS CDK

Education

Bachelor's degree in CS/Engineering

Tools

Rego

OPA

AWS CDK

CloudFormation

Job description

AWS Security Assurance Services LLC is hiring a Senior Security & Compliance Engineer to lead the design, deployment, and implementation of complex AWS security and compliance solutions that accomplish customer-defined business and security outcomes.

You will build custom security controls, AI-enabled automation and tooling, translate frameworks into secure-by-design implementations on AWS, write code, lead reviews, and own security risk identification and mitigation across teams.