AWS Cloud Security & Compliance Engineer II

Amazon Web Services (AWS); Arlington (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

AWS Security Assurance Services LLC is seeking a security specialist to lead threat modeling, security design reviews, and architecture reviews for customer engagements in a cloud environment.

You will design and implement preventive, detective, and proactive controls—SCPs, RCPs, policy-as-code—and automated remediation workflows using Terraform, AWS CDK, CloudFormation, Rego, and Cedar.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language experience.
• 2+ years scripting, programming, and security code review in a common language.
• 2+ years troubleshooting systems issues, analyzing logs, or automating tasks via CLI.
• Bachelor's degree in STEM or IT Security experience.
• Knowledge of HTTP, DNS and TCP/IP networking.
• Experience applying threat modeling or risk identification techniques.

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements.
• Design and implement preventive, detective, and proactive controls and policy-as-code.
• Build secure-by-design IaC controls for Landing Zones, Control Tower, and Zero-Trust architectures.
• Apply AWS security best practices for auth, data handling, encryption, and least privilege.
• Write and review IaC, scripts, enforcements, and detections in Python, Terraform, CDK, CloudFormation, and Rego.
• Develop continuous compliance monitoring, evidence collection, visualization, reporting, and remediation pipelines.

Skills

Python

Go

Java

C++

Ruby

Swift

.NET

Education

Bachelor's degree in STEM

Tools

Terraform

AWS CDK

CloudFormation

Config

Security Hub

IAM

KMS

VPC

CloudTrail

CloudWatch

Job description

AWS Security Assurance Services LLC is seeking a security specialist to lead threat modeling, security design reviews, and architecture reviews for customer engagements in a cloud environment.

You will design and implement preventive, detective, and proactive controls—SCPs, RCPs, policy-as-code—and automated remediation workflows using Terraform, AWS CDK, CloudFormation, Rego, and Cedar.