Security & Compliance Engineer – AWS Security Assurance

About the role

Join AWS Security Assurance Services to design, build, and deploy security and compliance solutions on AWS for highly regulated customers. You will own the full lifecycle of secure implementations, translating frameworks such as SOC2, HIPAA, PCI‑DSS, NIST, and FedRAMP into AWS‑native controls.

Key responsibilities

• Lead threat modeling, security design, and architecture reviews for customer engagements.
• Design and implement custom preventive, detective, and proactive controls (SCPs, RCPs, policy‑as‑code, automated remediation).
• Build secure‑by‑design Infrastructure‑as‑Code for Landing Zones, Control Tower customizations, Zero‑Trust architectures, and AI/ML workloads.
• Write and review IaC, scripts, and detections using Python, Terraform, AWS CDK, CloudFormation, and OPA Rego.
• Create continuous compliance monitoring, evidence collection, visualization, reporting, and remediation pipelines.
• Integrate custom controls with AWS‑native and third‑party security tooling.
• Prototype emerging security solutions and contribute technical content.
• Identify systemic risks, propose pragmatic solutions, and mentor junior engineers.

Required profile

• Strong experience delivering security and compliance solutions on AWS.
• Deep knowledge of regulatory frameworks (SOC2, HIPAA, PCI‑DSS, NIST, FedRAMP).
• Ability to work autonomously, lead cross‑functional projects, and mentor teammates.
• Excellent problem‑solving skills and a proactive risk‑identification mindset.

Required skills

• AWS (Control Tower, Landing Zones, IAM, SCP, RCP)
• Python
• Terraform
• AWS CDK
• CloudFormation
• OPA Rego & cfn‑guard
• Cedar
• Policy‑as‑code
• Infrastructure‑as‑Code
• Threat modeling
• Continuous compliance monitoring