Associate Security & Compliance Engineer – Cloud Security

Amazon Inc.; Herndon (VA); In loco; USD 136.000 - 184.000; Tempo pieno

Descrizione del lavoro

Amazon Inc. within AWS Security Assurance Services is hiring an Associate Security & Compliance Engineer to build and operate secure, compliant solutions for highly regulated customers.

You’ll implement security controls, write code and IaC, and help ship secure-by-design implementations across SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP. You’ll work with Terraform, AWS CDK, and CloudFormation while reviewing code and runbooks and contributing to threat modeling and automation efforts to

Competenze

• 2+ years of web protocols, common security attacks, and remediation experience.
• Bachelor’s degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques.
• Experience with web security and writing code or scripts.

Mansioni

• Implement custom security controls, enforcements, detections, and automated remediations.
• Contribute to IaC modules for Landing Zones, Control Tower customisations, and security baselines.
• Write Python and policy-as-code to extend preventive and detective controls.
• Participate in design reviews; provide constructive feedback.
• Contribute to runbooks, tooling, and security mechanisms used by the team.

Conoscenze

Web security

Security attacks

Remediation techniques

Python

Policy-as-code

IaC tooling

Terraform

AWS CDK

Cloud security

Code reviews

Communication

Formazione

Bachelor’s degree in Engineering, Computer Science, or related field

Strumenti

Terraform

AWS CDK

CloudFormation

Descrizione del lavoro

Amazon Inc. within AWS Security Assurance Services is hiring an Associate Security & Compliance Engineer to build and operate secure, compliant solutions for highly regulated customers.

You’ll implement security controls, write code and IaC, and help ship secure-by-design implementations across SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP. You’ll work with Terraform, AWS CDK, and CloudFormation while reviewing code and runbooks and contributing to threat modeling and automation efforts to