AWS Security & Compliance Engineer II - Threat Modeling

Amazon Web Services (AWS); Nashville (TN); On-site; USD 138,000 - 184,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Parental leave

Job summary

Amazon Web Services is seeking a Security Assurance Services engineer to lead threat modeling and architecture reviews for customer engagements, designing policy-as-code controls and automated remediation workflows. You will build secure-by-designIaC for Landing Zones and Zero-Trust architectures, applying best practices for authentication, encryption, and least privilege across cloud workloads.

The role includes developing scripts and detections in Python, Terraform, CDK, CloudFormation, and

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar language
• 2+ years of scripting and security code review in a non-internship setting
• 2+ years troubleshooting systems issues, analyzing logs, or automating tasks
• Bachelor's degree in STEM or IT Security
• Knowledge of HTTP, DNS, TCP/IP
• Experience applying threat modeling or risk identification techniques
• Experience communicating complex concepts to technical and business audiences
• Experience in at least one security domain: cloud security, threat modeling, incident response, or secure software development
• Experience mentoring, coaching, and influencing colleagues
• Proven ability to write/review code, scripts, IaC, and detections for security defenses
• Experience leading security investigations and root-cause analysis

Responsibilities

• Lead threat modeling and architecture reviews for customer engagements
• Design and implement policy-as-code and automated remediation workflows
• Develop secure-by-design IaC controls for Landing Zones and Zero-Trust architectures
• Apply AWS security best practices for authentication, authorization, encryption, and least privilege
• Write/review code, scripts, IaC, and detections in Python, Terraform, CDK, CloudFormation, and Rego
• Build continuous compliance monitoring and audit-ready evidence pipelines
• Integrate custom controls with AWS-native and third-party security tooling
• Prototype end-to-end security solutions to inform new products
• Identify risks and propose go/no-go gates and compensating controls
• Travel to customer sites as needed

Skills

Python

Terraform

IaC

Threat modeling

Security design reviews

Policy-as-code

Rego

CI/CD

AWS CDK

CloudFormation

Education

Bachelor's degree in STEM

Tools

Terraform

AWS CDK

CloudFormation

cfn-guard

OPA Rego

Cedar

Job description

Amazon Web Services is seeking a Security Assurance Services engineer to lead threat modeling and architecture reviews for customer engagements, designing policy-as-code controls and automated remediation workflows. You will build secure-by-designIaC for Landing Zones and Zero-Trust architectures, applying best practices for authentication, encryption, and least privilege across cloud workloads.

The role includes developing scripts and detections in Python, Terraform, CDK, CloudFormation, and