AWS Security & Compliance Engineer II - Threat Modeling

Amazon Web Services (AWS); Seattle (WA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amazon Web Services (AWS) is seeking a security-focused engineer to lead threat modeling and architecture reviews for customer engagements. You will design and implement policy-as-code and automated remediation workflows, and build secure-by-design IaC controls for Landing Zones and Zero-Trust architectures.

You will apply AWS security best practices, write code and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego, and develop continuous compliance monitoring pipelines for

Qualifications

• 3+ years programming in Python or similar OO language
• 2+ years scripting and security code review
• Bachelor's in STEM or IT Security
• Experience with threat modeling or risk identification
• Ability to convey complex concepts to technical and business audiences
• Experience with security, cloud, and identity controls in cloud environments
• Mentoring or leadership experience

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements
• Design and implement policy-as-code and automated remediation workflows
• Build secure-by-design IaC controls for Landing Zones and Zero-Trust architectures
• Apply AWS security best practices for authentication, encryption, least privilege
• Write and review IaC, scripts, and detections in Python, Terraform, CDK, CloudFormation, Rego
• Develop continuous compliance monitoring and audit-ready evidence pipelines
• Integrate controls with AWS-native and third-party security tooling
• Prototype end-to-end security and compliance solutions
• Identify risks and propose implementation paths
• Travel to customer sites as needed

Skills

Python

Threat modeling

Security code review

Communication to tech & business

Education

Bachelor's degree in STEM fields

Tools

Terraform

AWS CDK

CloudFormation

cfn-guard

OPA Rego

Cedar

Job description

Amazon Web Services (AWS) is seeking a security-focused engineer to lead threat modeling and architecture reviews for customer engagements. You will design and implement policy-as-code and automated remediation workflows, and build secure-by-design IaC controls for Landing Zones and Zero-Trust architectures.

You will apply AWS security best practices, write code and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego, and develop continuous compliance monitoring pipelines for