Security & Compliance Engineer I, AWS Security Assurance Services, LLC
Core
Build and operate AWS security and compliance solutions for highly regulated customers, executing security processes and contributing to runbooks and tooling.
Role type
Associate Security & Compliance Engineer (Cloud Infrastructure)
Builds
Secure-by-design implementations aligned to compliance frameworks (SOC2, HIPAA, PCI-DSS, CIS, NIST, FedRAMP) and automated compliance monitoring.
Domain
Cloud Security & Compliance
Required skills
Infrastructure-as-Code (Terraform, AWS CDK, CloudFormation), Python, Policy-as-code (cfn-guard, OPA Rego, Cedar), Risk assessment, Root cause analysis, Security controls implementation, Compliance monitoring, Technical writing
Preferred skills
AWS services expertise, Cloud architecture, Networking protocols (HTTP, DNS, TCP/IP), Security certifications (AWS Professional), Technical speaking, Open source contribution
Technologies
AWS Control Tower, Terraform, AWS CDK, CloudFormation, Python, cfn-guard, OPA Rego, Cedar, AWS Config, AWS Security Hub, IAM, KMS, VPC, Lambda, CloudTrail, CloudWatch/EventBridge
Responsibilities
Implement custom security controls and automated remediations; Contribute to IaC modules for Landing Zones and security baselines; Write and review code and IaC; Participate in design reviews; Implement continuous compliance monitoring and reporting dashboards; Identify and document risks and mitigations; Operate support tools and runbooks; Communicate security risks to leadership.
Seniority
Associate, hands-on IC