Senior Cloud Security & Compliance Engineer

Amazon Web Services (AWS); Dallas (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Web Services, Inc. is seeking a security professional to lead threat modeling, security architecture reviews, and policy-as-code implementation for customer engagements.

You will design proactive controls and automate remediation across multi-account environments, focusing on secure-by-design IaC and Zero-Trust architectures. The role emphasizes building compliance pipelines, integrating with native AWS services, and driving security innovations in Cloud infrastructure.

Qualifications

• 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, or C++.
• 2+ years of scripting and security code review experience.
• Bachelor's degree in STEM or IT security knowledge.
• Familiarity with networking protocols (HTTP, DNS, TCP/IP).
• Ability to write IaC, scripts, and detections to defend security controls.
• Experience leading security investigations and root-cause analysis.

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements.
• Design and implement policy-as-code and automated remediation workflows.
• Build secure-by-design IaC controls for Landing Zones and Zero-Trust architectures.
• Apply AWS security best practices for authentication, authorization, and data handling.
• Write and review IaC and detections in Python, Terraform, CDK, CloudFormation, and Rego.
• Develop continuous compliance monitoring and audit-ready evidence pipelines.
• Integrate controls with AWS-native and third-party security tooling.

Skills

Python

Java

Go

C++

Ruby

.NET

TypeScript

Education

Bachelor's degree in STEM

Tools

Terraform

AWS CDK

CloudFormation

cfn-guard

OPA Rego

Cedar

Config

Security Hub

Job description

Amazon Web Services, Inc. is seeking a security professional to lead threat modeling, security architecture reviews, and policy-as-code implementation for customer engagements.

You will design proactive controls and automate remediation across multi-account environments, focusing on secure-by-design IaC and Zero-Trust architectures. The role emphasizes building compliance pipelines, integrating with native AWS services, and driving security innovations in Cloud infrastructure.