Cloud Security & Compliance Engineer I

Amazon Web Services (AWS); Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Amazon Web Services (AWS) Security Assurance Services (SAS) is hiring an Associate Security & Compliance Engineer to build and operate security and compliance solutions for highly regulated customers.

You will implement security controls, write IaC, and develop runbooks while collaborating with cross‑functional teams to deliver secure-by-design implementations aligned to SOC2, HIPAA, PCI-DSS, CIS, NIST, FedRAMP.

Qualifications

• 2+ years of web protocols, common security attacks, and remediation experience.
• Bachelor’s degree in Engineering, Computer Science, or a related field.
• Experience with web security and software engineering in internships or related work.

Responsibilities

• Implement custom security controls, enforcements, detections, and automated remediations.
• Contribute to IaC modules for Landing Zones, AWS Control Tower security baselines.
• Write Python and policy-as-code to extend preventive and detective controls.
• Participate in code, IaC, and design reviews; provide constructive feedback.
• Contribute to POCs on emerging technologies; implement components and document findings.
• Implement continuous compliance monitoring checks, evidence collection automations, and dashboards.
• Identify risks and mitigations during design and implementation stages of customer engagements.
• Apply risk trade-offs under guidance.
• Contribute to runbooks, tools, and security mechanisms used by the team.
• Participate in operational support; diagnose problems and escalate when blocked.
• Communicate security risk clearly to team and leadership.
• Solicit differing views and learn from peer feedback.
• Travel to customer sites as needed.

Skills

Web protocols

Security threats

Coding/scripting

IAM/Access control

Security best practices

Education

Bachelor’s degree in Engineering, Computer Science, or related field

Tools

Terraform

AWS CDK

CloudFormation

Python

cfn-guard

OPA Rego

Cedar

Job description

Amazon Web Services (AWS) Security Assurance Services (SAS) is hiring an Associate Security & Compliance Engineer to build and operate security and compliance solutions for highly regulated customers.

You will implement security controls, write IaC, and develop runbooks while collaborating with cross‑functional teams to deliver secure-by-design implementations aligned to SOC2, HIPAA, PCI-DSS, CIS, NIST, FedRAMP.