Sr. Security & Compliance Engineer, AWS Security Assurance Services, LLC

United States of America

Full Time

5 hours ago

$151,000 - $205,000 USD

H1B Sponsor Likely

Key skills

AWS Security and ComplianceSecurity Risk Identification and MitigationSecure Coding and Security Code ReviewPythonJavaGoTerraformAWS CDKCloudFormationPolicy-as-Code cfn-guardPolicy-as-Code OPA RegoPolicy-as-Code CedarAWS Security and Governance Services ConfigAWS Security and Governance Services GuardDutyAWS Security and Governance Services Security HubAWS Security and Governance Services Control TowerAWS Security and Governance Services IAMAWS Security and Governance Services KMSCISSP and AWS Security CertificationsWritten and Verbal CommunicationTypeScriptC++CScala.NETAIMLAgenticNode.jsAWSAmazon Web ServicesLambdaIAMCloudWatchSalesCloud Security

About this role

AWS Security Assurance Services LLC, part of Amazon Web Services, helps regulated customers achieve, maintain, and automate cloud security and compliance. The Senior Security & Compliance Engineer will design and implement complex AWS security and compliance solutions, build AI-enabled automation and secure infrastructure, and lead risk mitigation, architecture, reviews, and customer-facing technical outcomes.

Responsibilities:

Own design and architecture choices for security and compliance automation solutions for regulated customers and influence partner-org design and deliverables
Engineer and lead AI-enabled automations, threat modeling, design reviews
Build secure-by-design IaC modules for Landing Zones, Control Tower customizations, Zero-Trust architectures, and AI/ML workloads
Lead the design, deployment, and implementation of AWS security controls, continuous compliance monitoring, evidence collection, and remediation of insecure configurations to scale with automation
Architect custom preventive, detective, and proactive controls, SCPs, RCPs, policy-as-code (cfn-guard, OPA Rego, Cedar)
Set high bar for authentication and authorization, data protection, least privilege, encryption, micro-segmentation, tagging strategy, integrations via API and MCP, and secure AI agentic design
Write and review scripts, and IaC (Python, Terraform, AWS CDK, CloudFormation, Rego)
Lead exploratory POCs on emerging technologies. Define the hypothesis, success criteria, and go/no-go gates
Lead alignment, resolve escalations, troubleshooting, and root-cause analysis to closure
Lead the development of technical content
Communicate security risk and design decisions clearly verbally and in writing to technical, non-technical, and C-level audiences
Identify and shape sales opportunities. influence service-team roadmaps and SAS offering strategy
Travel to customer sites as needed

Requirements:

5+ years of work in identifying security issues and risks, and developing mitigation plans experience
4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
Experience with security in service-oriented architectures/microservices and web services
8+ years as a technical specialist, including 5+ years in secure coding, software development, cloud security engineering or related work
Strong programming and scripting skills in Python, TypeScript, Node.js, Go, Java, or .NET
Advanced Infrastructure-as-Code proficiency in Terraform, AWS CDK, and/or CloudFormation
Expert-level configuration and architectural experience with AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge
Track record of deploying SCPs and RCPs in multi-account AWS Organizations at enterprise scale
Experience writing and deploying reusable policy-as-code patterns (cfn-guard, OPA Rego, Cedar, or equivalent)
Industry and AWS certifications: CISSP, AWS Solutions Architect Professional, AWS Security Specialty strongly preferred; additional certifications a plus