AWS Security & Compliance Engineer II: Threat Modeling & IaC

Amazon Web Services (AWS); Austin (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Web Services (AWS) is seeking a security engineering professional to lead threat modeling, architecture reviews, and design reviews for customer engagements. You will build preventive, detective, and proactive controls using policy-as-code and automated remediation workflows.

You will design secure-by-design IaC controls, apply best practices for authentication and data handling, and write code and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language experience.
• 2+ years scripting and security code review in a common language.
• 2+ years troubleshooting systems issues, analyzing logs, or automating tasks.
• Bachelor's degree in a STEM field or IT Security.
• Knowledge of HTTP, DNS and TCP/IP.
• Experience applying threat modeling or risk identification techniques.

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements.
• Design and implement preventive, detective, and proactive controls (SCPs, RCPs, policy-as-code).
• Build secure-by-design IaC controls for Landing Zones and Zero-Trust architectures.
• Apply AWS security best practices for authentication, authorization, encryption, and least privilege.
• Write IaC, scripts, enforcements, and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego.
• Develop continuous compliance monitoring and remediation pipelines.
• Integrate custom controls with AWS-native and third-party tooling.
• Prototype end-to-end security solutions and products.
• Identify risks and edge cases; propose implementation paths and gates.
• Identify cross-team patterns and opportunities for improvement.
• Travel to customer sites as needed.

Skills

Python

Ruby

Go

Java

.NET

C++

Scripting

Networking basics

Mentoring

Security concepts

Education

Bachelor's degree in STEM

Tools

Terraform

AWS CDK

CloudFormation

Rego

cfn-guard

OPA Rego

Job description

Amazon Web Services (AWS) is seeking a security engineering professional to lead threat modeling, architecture reviews, and design reviews for customer engagements. You will build preventive, detective, and proactive controls using policy-as-code and automated remediation workflows.

You will design secure-by-design IaC controls, apply best practices for authentication and data handling, and write code and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego.