Security & Compliance Engineer II, AWS Security Assurance Services, LLC

Amazon

Seattle, WA

Apply

JOB DETAILS

SKILLS

AWS Lambda, Access Control, Amazon Web Services (AWS), Analysis Skills, Application Framework, Application Programming Interface (API), Applications Security, Artificial Intelligence (AI), Authentication, Authentication Software, Automation, Best Practices, C++ Programming Language, CISSP - Certified Information Systems Security Professional, Cloud Architecture, Cloud Computing, Code Reviews, Command Line, Communication Skills, Computer Programming, Computer Security, Conferences, Content Development, Continuous Deployment/Delivery, Continuous Integration, Conveyancing, Cross-Functional, Cryptography, Cryptography Software, Customer Support/Service, DNS (Domain Name System), Detail Oriented, DevOps, Go Programming Language (Golang), HIPAA (Health Insurance Portability and Accountability Act), HTTP (HyperText Transport Protocol), Identify Issues, Identity Data Management, Incident Response, Java, Leadership, MCP - Microsoft Certified Professional, Machine Tool, Maintain Compliance, Mathematics, Mentoring, Microsoft .NET, Model Review, Network Protocols, Network Security, Node.js, Object Oriented Programming (OOP) Languages, Open Source, Operations Security (OPSEC), PCI, PCI-DSS, Penetration Testing, Policy Development, Programming Languages, Protective Services, Prototyping, Python Programming/Scripting Language, Risk Analysis, Risk Management, Root Cause Analysis, Ruby, Scripting (Scripting Languages), Secure Coding, Security Design, Software Development, Software Development Lifecycle (SDLC), Software Engineering, Statements on Auditing Standards (SAS), Statistical Analysis System (SAS), Systems Administration/Management, Systems Analysis, TCP/IP (Transmission Control Protocol/Internet Protocol), Technical Writing, Testing, Threat Modeling, U.S. National Institute of Standards and Technology (NIST), Willing to Travel, Writing Skills

LOCATION

Seattle, WA

POSTED

25 days ago

Description AWS Security Assurance Services (SAS) is hiring a Security & Compliance Engineer to design, build, and deploy AWS security and compliance solutions for highly regulated customers. You will own engineering deliverables across the full lifecycle - secure design, implementation, testing, deployment, and maintenance - translating compliance frameworks (SOC2, HIPAA, PCI-DSS, CIS, NIST, FedRAMP) into secure-by-design AWS implementations. You will work autonomously within your team, deliver cross-functional projects with partner teams, and drive measurable risk reduction for customers at scale. You'll write code, ship custom controls, run security investigations, lead design and code reviews on your team, and mentor junior engineers. You will identify systemic issues, propose pragmatic solutions, and improve the team's mechanisms over time. Key job responsibilities - Lead threat modeling, security design reviews, and architecture reviews for customer engagements; identify and mitigate risks across systems and applications. - Design and implement custom preventive, detective, and proactive controls - Service Control Policies (SCPs), Resource Control Policies (RCPs), policy-as-code (cfn-guard, OPA Rego, Cedar), and automated remediation workflows. - Build secure-by-design Infrastructure-as-Code controls for Landing Zones, AWS Control Tower customizations, Zero-Trust architectures, and AI/ML workloads. - Apply AWS security best practices for authentication and authorization, data handling, least privilege, encryption, micro-segmentation, tagging strategy, and API/MCP integration. - Write and review IaC, scripts, enforcements and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego. - Build continuous compliance monitoring, automated evidence collection, visualization, reporting, and remediation pipelines that hold up in audit. - Integrate custom controls with AWS-native and third-party security and compliance tooling. - Drive emerging-edge ideas into prototyping end-to-end to inform new security and compliance solutions and products. - Identify risks and edge cases; propose implementation paths and go/no-go gates. - Apply systematic approaches to risk identification; propose compensating controls when direct remediation isn't possible. - Help develop technical content - Identify cross-team patterns, gaps, improvements. - Travel to customer sites as needed. About the team The AWS Security Assurance Services team, within AWS Support, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world's workloads requires reliable delivery of bar-raising security outcomes and investment in security mechanisms and automation on behalf of our customers. AWS Security Assurance Services LLC, a PCI-QSAC and HITRUST External Assessor Firm, is a team of industry-certified assessors and Compliance Engineers with DevOps and Cloud Infrastructure Architect backgrounds, helping our customers achieve, maintain, and automate compliance in the cloud by tying applicable audit standards to AWS service-specific features and functionality. The SAS team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Basic Qualifications - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) - 2+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience - Experience with threat modeling and penetration testing, or experience that includes strong analytical skills, attention to detail, and effective communication abilities - Experience conveying complex technical concepts to both technical and business audiences - Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development - - Demonstrated ability to write and review code, scripts, IaC, and detections in support of security defenses. - - Demonstrated ability to lead security investigations and resolve root causes of operational and security issues. - - Demonstrated ability to mentor peers, drive consensus on conflicting design or implementation feedback, and provide meaningful review feedback. Preferred Qualifications - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing - Experience in supporting audit defense - Experience in mentoring, leading, or managing more junior engineers - Experience writing technical articles, speaking at technology conferences, and contributing to open source - - 5+ years as a technical specialist, including 3+ years in secure coding, software development, cloud security engineering, or related work - - Strong programming and scripting skills in Python, TypeScript, Node.js, Go, Java, or .NET. - - Hands-on Infrastructure-as-Code skills in Terraform, AWS CDK, or CloudFormation. - - Hands-on experience with AWS security and governance services: Config, Security Hub, IAM, KMS, VPC, Lambda, CloudTrail, CloudWatch/EventBridge. - - Experience deploying SCPs and RCPs in multi-account AWS Organizations. - - Experience writing and deploying policy-as-code (cfn-guard, OPA Rego, Cedar, or equivalent). - - Experience designing CI/CD pipelines for security or compliance control deployment. - - Experience with AWS Control Tower customizations, Landing Zones, or Zero-Trust architectures. - - Working knowledge of at least one compliance framework: SOC2, HIPAA, PCI-DSS, CIS, or NIST. - - Spec-driven development; AI agentic design and Model Context Protocol (MCP) experience. - - Industry and AWS certifications: AWS Solutions Architect Associate or Professional, AWS Security Specialty, CISSP, or equivalent. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TN, Nashville - 137,600.00 - 184,000.00 USD annually USA, TX, Austin - 159,300.00 - 202,400.00 USD annually USA, TX, Dallas - 159,300.00 - 202,400.00 USD annually USA, TX, Houston - 159,300.00 - 202,400.00 USD annually USA, VA, Arlington - 159,300.00 - 202,400.00 USD annually USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually

About the Company

Amazon

At Amazon, we don’t wait for the next big idea to present itself. We envision the shape of impossible things and then we boldly make them reality. So far, this mindset has helped us achieve some incredible things. Let’s build new systems, challenge the status quo, and design the world we want to live in. We believe the work you do here will be the best work of your life.

Wherever you are in your career exploration, Amazon likely has an opportunity for you. Our research scientists and engineers shape the future of natural language understanding with Alexa. Fulfillment center associates around the globe send customer orders from our warehouses to doorsteps. Product managers set feature requirements, strategy, and marketing messages for brand new customer experiences. And as we grow, we’ll add jobs that haven’t been invented yet.

It’s Always Day 1
At Amazon, it’s always “Day 1.” Now, what does this mean and why does it matter? It means that our approach remains the same as it was on Amazon’s very first day – to make smart, fast decisions, stay nimble, invent, and stay focused on delighting our customers. In our 2016 shareholder letter, Amazon CEO Jeff Bezos shared his thoughts on how to keep up a Day 1 company mindset. “Staying in Day 1 requires you to experiment patiently, accept failures, plant seeds, protect saplings, and double down when you see customer delight,” he wrote. “A customer-obsessed culture best creates the conditions where all of that can happen.” You can read the full letter here

Our Leadership Principles
Our Leadership Principles help us keep a Day 1 mentality. They aren’t just a pretty inspirational wall hanging. Amazonians use them, every day, whether they’re discussing ideas for new projects, deciding on the best solution for a customer’s problem, or interviewing candidates. To read through our Leadership Principles from Customer Obsession to Bias for Action, visit https://www.amazon.jobs/principles

COMPANY SIZE

10,000 employees or more

INDUSTRY

Other/Not Classified

FOUNDED

1994

WEBSITE

http://Amazon.com/militaryroles