Security & Compliance Engineer II - Cloud Risk & Automation

Amazon Web Services (AWS); Houston (TX); On-site; USD 159,300 - 202,400; Full time

Job summary

AWS Security Assurance Services LLC seeks a Security & Compliance Engineer to design, build, and deploy security and compliance solutions for highly regulated customers. You will own engineering deliverables across the full lifecycle—secure design, implementation, testing, deployment, and maintenance—translating frameworks into secure AWS implementations.

You will write code, review IaC, run security investigations, mentor engineers, and drive risk reduction at scale across Landing Zones and

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language experience.
• 2+ years of scripting, programming, and security code review in a common programming language.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools.
• Bachelor's degree in a STEM field or experience in IT Security.
• Knowledge of HTTP, DNS and TCP/IP networking.
• Knowledge of security vulnerabilities and remediation techniques.
• 3+ years of security engineering with full lifecycle delivery.
• Demonstrated ability to write and review code, scripts, IaC and detections.
• Demonstrated ability to mentor peers and provide review feedback.

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements.
• Design and implement custom preventive, detective, and proactive controls and policy-as-code.
• Build secure-by-design IaC controls for Landing Zones and AI/ML workloads.
• Apply AWS security best practices for authentication, authorization, data handling, and encryption.
• Write and review IaC, scripts, enforcements and detections in Python, Terraform, CDK, CloudFormation, and Rego.
• Build continuous compliance monitoring, evidence collection, visualization, and remediation pipelines.
• Integrate custom controls with AWS-native and third-party tooling.
• Prototype end-to-end security and compliance solutions for new products.
• Identify risks and edge cases; propose implementation paths and gates.
• Mentor peers and drive design feedback across teams.
• Travel to customer sites as needed.

Skills

Python

Threat modeling

Security engineering

Code review

Networking

AWS & IaC

Policy as code

Mentoring

Education

Bachelor's degree in STEM

Tools

Terraform

AWS CDK

CloudFormation

Job description

AWS Security Assurance Services LLC seeks a Security & Compliance Engineer to design, build, and deploy security and compliance solutions for highly regulated customers. You will own engineering deliverables across the full lifecycle—secure design, implementation, testing, deployment, and maintenance—translating frameworks into secure AWS implementations.

You will write code, review IaC, run security investigations, mentor engineers, and drive risk reduction at scale across Landing Zones and