Associate Cloud Security & Compliance Engineer

Amazon Web Services (AWS); Austin (TX); Sur place; USD 120 000 - 170 000; Plein temps

Avantages offerts par ce poste

Flexible work hours

Mentorship and career growth

Inclusive team culture

Résumé du poste

Amazon Web Services (AWS) is hiring an Associate Security & Compliance Engineer to help build and operate security and compliance solutions for highly regulated customers. You will implement controls, contribute to IaC modules, and write policy code to enforce secure-by-design implementations aligned to SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP.

You will work with Terraform, AWS CDK, and CloudFormation, write Python and policy-as-code, and participate in design reviews and customer

Qualifications

• 2+ years of web protocols, common security attacks, and remediation (non-internship) experience.
• Bachelor’s degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.
• Experience with web security, or experience demonstrating software engineering skills in a previous internship, work experience, coding competitions, or publications and experience in networking administration and troubleshooting.
• 1+ years of cloud architecture and solution implementation experience, or US government security clearance of top secret or above.

Responsabilités

• Implement custom security controls, enforcements, detections, and automated remediations.
• Contribute to Infrastructure-as-Code modules for Landing Zones, AWS Control Tower customizations, and security baselines using Terraform, AWS CDK, or CloudFormation.
• Write Python and policy-as-code (cfn-guard, OPA Rego, Cedar) to extend preventive and detective controls.
• Participate in code, IaC, and design reviews; provide constructive feedback
• Contribute to POCs on emerging technologies; implement components, run experiments, and document findings so the team can build on the results.
• Implement continuous compliance monitoring checks, evidence collection automations, and reporting dashboards.
• Help identify, confirm and document risks and mitigations during design and implementation stages of customer engagements.
• Apply common risk trade-offs under guidance.
• Contribute to runbooks, tools, and other security mechanisms used by the team and customers.
• Participate in operational support; help ensure root causes of operational and security issues are identified and resolved.
• Follow established procedures to diagnose problems, and elevate appropriately when blocked.
• Communicate security risk clearly in writing and verbally to your team and direct leadership.
• Solicit differing views and learn from peer feedback.
• Travel to customer sites as needed.

Connaissances

Web security

Security protocols

Code scripting

Threat modeling

Formation

Bachelor's degree in Engineering, CS, or related field

Outils

Terraform

AWS CDK

CloudFormation

Description du poste

Amazon Web Services (AWS) is hiring an Associate Security & Compliance Engineer to help build and operate security and compliance solutions for highly regulated customers. You will implement controls, contribute to IaC modules, and write policy code to enforce secure-by-design implementations aligned to SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP.

You will work with Terraform, AWS CDK, and CloudFormation, write Python and policy-as-code, and participate in design reviews and customer