Cloud Security & Compliance Engineer II – AWS

Amazon Web Services (AWS); Arlington (VA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Web Services (AWS) seeks a Security & Compliance Engineer to design, build, and deploy security and compliance solutions for highly regulated customers. You will own engineering deliverables across the full lifecycle—from secure design to maintenance—translating SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP into secure AWS implementations.

You will write code, run investigations, and mentor junior engineers, delivering cross-functional projects with partner teams to reduce risk at

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language.
• 2+ years of scripting, programming, and security code review (non-internship).
• 2+ years of troubleshooting systems issues, logs, or automating tasks (non-internship).
• Knowledge of networking protocols and security vulnerabilities.
• Experience with threat modeling and penetration testing or strong analytical skills.
• Experience leading security investigations and mentoring peers.

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements.
• Design and implement custom controls and automated remediation workflows.
• Build secure-by-design IaC controls for Landing Zones and Zero-Trust architectures.
• Apply AWS security best practices for authentication, encryption, and least privilege.
• Write and review IaC, scripts, and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego.
• Develop continuous compliance monitoring, evidence collection, visualization, and remediation pipelines.
• Integrate custom controls with AWS-native and third-party tooling.
• Travel to customer sites as needed.

Education

Bachelor's degree in STEM or IT Security

Tools

Terraform

AWS CDK

CloudFormation

cfn-guard

OPA Rego

CEDAR

Job description

Amazon Web Services (AWS) seeks a Security & Compliance Engineer to design, build, and deploy security and compliance solutions for highly regulated customers. You will own engineering deliverables across the full lifecycle—from secure design to maintenance—translating SOC2, HIPAA, PCI-DSS, CIS, NIST, and FedRAMP into secure AWS implementations.

You will write code, run investigations, and mentor junior engineers, delivering cross-functional projects with partner teams to reduce risk at