AWS Security & Compliance Engineer II: Secure-by-Design Cloud

Amazon Web Services (AWS); Herndon (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

AWS Security Assurance Services LLC is hiring a Security & Compliance Engineer to design, build, and deploy security and compliance solutions for highly regulated customers. The role covers secure design, implementation, testing, deployment, and maintenance while translating SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP requirements into secure AWS implementations.

You will write code, ship custom controls, run security investigations, review designs, mentor engineers, and drive risk reduction at

Qualifications

• 3+ years of programming in Python or similar OO language.
• 2+ years of scripting, programming, and security code review.
• Bachelor's degree in STEM or IT Security.
• Experience with threat modeling and security testing.
• Hands-on IaC with Terraform, AWS CDK, or CloudFormation.

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements.
• Design and implement preventive, detective, and proactive controls (SCPs, RCPs, policy-as-code).
• Build secure-by-design Infrastructure-as-Code controls for Landing Zones and Zero-Trust architectures.
• Write and review IaC, scripts, enforcements, and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego.
• Develop and operate continuous compliance monitoring and audit-ready evidence pipelines.

Skills

Python

Threat modeling

Security code review

Incident response

Education

Bachelor's degree in STEM

Tools

Terraform

AWS CDK

CloudFormation

cfn-guard

OPA Rego

Job description

AWS Security Assurance Services LLC is hiring a Security & Compliance Engineer to design, build, and deploy security and compliance solutions for highly regulated customers. The role covers secure design, implementation, testing, deployment, and maintenance while translating SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP requirements into secure AWS implementations.

You will write code, ship custom controls, run security investigations, review designs, mentor engineers, and drive risk reduction at