Security & Compliance Engineer, AWS Security Assurance Services, LLC

AWS Security Assurance Services (SAS) is hiring a Security & Compliance Engineer to design, build, and deploy AWS security and compliance solutions for highly regulated customers. You will own engineering Basic qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Experience applying threat modeling or other risk identification techniques or equivalent Preferred: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing - Experience writing for developer and technical audiences: blog, product documentation, technical information - • Strong programming and scripting skills in Python, TypeScript, Node.js, Go, Java, or .NET. - • Hands-on Infrastructure-as-Code skills in Terraform, AWS CDK, or CloudFormation. - • Hands-on experience with AWS security and governance services: Config, Security Hub, IAM, KMS, VPC, Lambda, CloudTrail, CloudWatch/EventBridge. - • Experience deploying SCPs and RCPs in multi-account AWS Organizations. - • Experience writing and deploying policy-as-code (cfn-guard, OPA Rego, Cedar, or equivalent). - • Experience designing CI/CD pipelines for security or compliance control deployment. - • Experience with AWS Control Tower customizations, Landing Zones, or Zero-Trust architectures. - • Working knowledge of at least one compliance framework: SOC2, HIPAA, PCI-DSS, CIS, or NIST. - • Experience producing audit-ready evidence and working with third-party assessors. - • Spec-driven development; AI agentic design and Model Context Protocol (MCP) experience. - • Industry and AWS certifications: AWS Solutions Architect Associate or Professional, AWS Security Specialty, CISSP, or equivalent. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.