Cloud Security Engineer III — Threat Modeling

Amazon; New York (NY); On-site; USD 176,000 - 237,000; Full time

Benefits offered by this job

Equity may be provided as part of the総

Medical and other benefits

Job summary

Amazon Development Center U.S., Inc. in New York, NY seeks a Security Engineer III to define and implement governance controls across AWS services. You will partner with product, engineering, and identity teams to design scalable, auditable security measures addressing risk, cost, performance, and resiliency.

Required are a bachelor's or equivalent with 5+ years in cloud security, including threat modeling, AWS Config Rules, CloudFormation Guard, and policy-as-code. Equal opportunity employer.

Qualifications

• Bachelor's degree or foreign equivalent in CS or related field with five years of related experience, or eight years in lieu of degree.
• Five years of threat modeling and security risk assessment of cloud services and distributed systems.
• Experience with governance controls aligned to frameworks (NIST, SOC 2, PCI-DSS, ISO 27001, GDPR).
• Three years in cloud architecture with IaC (CloudFormation, Terraform) and security policy-as-code.

Responsibilities

• Partner with Product, Engineering, and Identity teams to define controls and governance in the cloud.
• Design scalable preventative and detective security controls auditable over time.
• Ensure controls align with enterprise risk and compliance posture in AWS.

Skills

Threat modeling

Security risk assessment

AWS Config Rules

CloudFormation Guard

Governance controls

Threat modeling & risk assessment

IaC security

Education

Bachelor's degree in Computer Science or related field

Tools

CloudFormation

Terraform

Policy-as-code

Job description

Amazon Development Center U.S., Inc. in New York, NY seeks a Security Engineer III to define and implement governance controls across AWS services. You will partner with product, engineering, and identity teams to design scalable, auditable security measures addressing risk, cost, performance, and resiliency.

Required are a bachelor's or equivalent with 5+ years in cloud security, including threat modeling, AWS Config Rules, CloudFormation Guard, and policy-as-code. Equal opportunity employer.