Security Controls Engineer II – Compliance & Documentation

VulnU; Herndon (VA); On-site; USD 102,000 - 178,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Equity

Flexible PTO

Job summary

Amazon Security's CAPS team is seeking a deeply technical security controls specialist to steward a portfolio of controls. You will document how controls are designed, implemented and evidenced, coordinating with engineering and service teams to ensure comprehensive coverage for compliance programs.

You will dive into build pipelines, code review, testing, and resilience, translating requirements into actionable controls and supporting audit readiness, risk assessments, and AI-related risk

Qualifications

• 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments.
• 3+ years of experience assessing complex technical processes.
• Bachelor’s Degree in CS/IS/Math/Accounting or equivalent practical experience.
• Experience with audit or risk program design, control environment process documentation, and control mapping.
• Experience with monitoring and automating security controls.
• Experience in third-party and/or internal audit examinations.
• Demonstrates high judgement and risk decision making abilities.
• Experience understanding the risk profile of emerging AI technologies.

Responsibilities

• Partner with control owners and engineering teams to clearly document how their controls are designed, implemented and evidenced.
• Assess the overall shape of your control areas: find gaps, overlaps and conflicts, and ensure appropriate coverage.
• Dive into build and deployment pipelines, code review, security testing and resilience mechanisms to reflect actual systems.
• Translate security, regulatory and framework requirements into actionable, testable technical controls with service teams.
• Build understanding of AWS services and map practices to internal control framework and assessment processes.
• Evaluate risk for emerging AI platforms and reflect risks in control design and assessment processes.
• Support service, feature and control assessments for customer, regulatory and audit requirements.
• Identify high-risk areas and drive remediation and process improvement.
• Help design and deliver tooling that simplifies control documentation and evidence collection.
• Communicate program status and outcomes to engineering teams and leadership.

Skills

Security risk management

Audits

Control assessments

Threat modeling

Education

Bachelor's Degree in CS/IS/Math/Accounting

Job description

Amazon Security's CAPS team is seeking a deeply technical security controls specialist to steward a portfolio of controls. You will document how controls are designed, implemented and evidenced, coordinating with engineering and service teams to ensure comprehensive coverage for compliance programs.

You will dive into build pipelines, code review, testing, and resilience, translating requirements into actionable controls and supporting audit readiness, risk assessments, and AI-related risk