AWS Security Architect / Security Engineer — Agentic AI & AWS Security Services

Lorven Technologies Inc.; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Lorven Technologies Inc. seeks an AWS Security Architect / Security Engineer for Agentic AI & AWS Security Services.

This remote role focuses on owning security architecture across AWS delivery workstreams, challenging designs, translating threats, and ensuring remediation before handoff. Responsibilities include threat modeling, architecture reviews, and implementing guardrails for AI agents while aligning with SOX, GDPR, and other requirements.

Qualifications

• Lead threat modeling and security reviews across multiple AWS delivery workstreams.
• Hands-on experience with TypeScript or Python in serverless AWS environments.
• IaC with Terraform/CDK/CloudFormation and CI/CD security, including GitLab pipelines.
• Knowledge of AI-agent guardrails, prompt-injection and least-privilege design.
• Familiarity with AWS security services (GuardDuty/Macie/Security Hub) and data protection.
• Ability to map controls to SOX, GDPR and other regulatory requirements.

Responsibilities

• Lead design security reviews and verify remediation across concurrent workstreams.
• Create and maintain STRIDE threat models; update threats and residual risks.
• Review agent architectures for prompt-injection, data-exfiltration and privilege risks.
• Define model guardrails, data boundaries, PII redaction, and least-privilege roles.
• Validate multi-account guardrails, IAM, encryption, logging and monitoring.
• Explain risk and control evidence to engineering and regulatory stakeholders.

Skills

Threat modeling

Architecture review

Code review

AWS security

TypeScript

Python

Serverless

IAM

CI/CD security

Data protection

Education

AWS Certified Security - Specialty

Tools

Terraform

CDK

CloudFormation

GitLab

GuardDuty

Macie

Security Hub

Job description

Role: AWS Security Architect / Security Engineer — Agentic AI & AWS Security Services

Location: Remote

Role purpose - Own security architecture and engineering assurance across AWS delivery workstreams, including agentic-AI use cases. The successful candidate must be able to challenge designs, translate threats and regulatory obligations into implementable guardrails, and verify that remediation is complete before handoff.

What the person will deliver

• Lead design security reviews, review SAST and DAST findings, and verify remediation across three to five concurrent workstreams.
• Create and maintain STRIDE-based threat models, updating threats, controls and residual risks when architecture changes.
• Review agent architectures for prompt-injection, data-exfiltration, excessive agency and privilege risks; define model guardrails, data boundaries, PII redaction and least-privilege roles.
• Validate multi-account guardrails, IAM, encryption, network controls, logging and monitoring across AWS services and delivery pipelines.
• Map controls and evidence to SOX, GDPR and other engagement-specific regulatory requirements.
• Review technical deliverables before handoff and brief new team members on security expectations and data-handling processes.

What the person will deliver

• Demonstrated threat-modeling, architecture-review and code-review experience
• Hands-on TypeScript or Python and practical knowledge of serverless, API, data and identity services on AWS
• IaC using Terraform, CDK or CloudFormation and CI/CD security experience, including GitLab pipelines
• Practical understanding of AI-agent guardrails, prompt-injection, data leakage and least-privilege design
• Working knowledge of GuardDuty, Macie and Security Hub
• Ability to explain technical risk and control evidence to engineering and regulatory stakeholders
• Certification requirement: Must hold the AWS Certified Security - Specialty certification or be ready to obtain it within four weeks of hire.