AWS Security & Compliance Engineer II: Secure by Design

Amazon Web Services (AWS); Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Web Services, Inc. AWS Security Assurance Services is seeking a security engineer to lead threat modeling and architecture reviews. You will design policy-as-code, automate remediation, and build secure-by-design infrastructure across AWS Landing Zones and Control Tower.

You will implement defenses and integrate tools, collaborating with cross-functional teams. The role requires strong programming skills, IaC experience (Terraform, CDK, CloudFormation), and experience with security and

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language
• 2+ years of scripting and security code review
• Bachelor’s degree in STEM or IT security
• Knowledge of HTTP, DNS, TCP/IP
• Demonstrated ability to write/review code, IaC, detections for security defenses
• Demonstrated ability to lead security investigations and root-cause analysis

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements
• Design and implement policy-as-code and automated remediation workflows
• Build secure-by-design IaC controls for Landing Zones and AWS Control Tower
• Apply AWS security best practices for authentication, data handling, and least privilege
• Write/review IaC and detections in Python, Terraform, AWS CDK, CloudFormation, Rego
• Develop continuous compliance monitoring and audit-ready evidence pipelines
• Integrate controls with AWS-native and third-party tooling
• Collaborate across teams and travel to customer sites as needed

Skills

Python

Ruby

Go

Swift

Java

C#/.NET

C++

Education

Bachelor’s degree in STEM fields

Tools

Terraform

AWS CDK

CloudFormation

cfn-guard/OPA Rego/Cedar

Job description

Amazon Web Services, Inc. AWS Security Assurance Services is seeking a security engineer to lead threat modeling and architecture reviews. You will design policy-as-code, automate remediation, and build secure-by-design infrastructure across AWS Landing Zones and Control Tower.

You will implement defenses and integrate tools, collaborating with cross-functional teams. The role requires strong programming skills, IaC experience (Terraform, CDK, CloudFormation), and experience with security and