{"id":2654326,"url":"https://alion.io/job/amazon-security-compliance-engineer-aws-security-assurance-services-llc","title":"Security & Compliance Engineer, AWS Security Assurance Services, LLC","company":{"id":19,"name":"Amazon","domain":"amazon.com","url":"https://alion.io/company/amazon","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":83,"open_postings":4347,"ghost_share":0,"stale_share":0.886,"repost_share":0.001,"time_to_fill_p50_days":17,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":106000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"CloudFormation","optional":false},{"name":"FedRAMP","optional":false},{"name":"Go","optional":false},{"name":"HIPAA","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":".NET","optional":true},{"name":"Amazon CloudWatch","optional":true},{"name":"Amazon EventBridge","optional":true},{"name":"AWS Lambda","optional":true},{"name":"C#","optional":true},{"name":"C++","optional":true},{"name":"CI/CD","optional":true},{"name":"DNS","optional":true},{"name":"IAM","optional":true},{"name":"Java","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"Ruby","optional":true},{"name":"TCP/IP","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-06-08T00:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-22T01:40:13Z","board_verified":true,"closed_at":null,"days_open":136,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":135},"description":"AWS Applied AI Solutions (AAIS) is building toward a future where every business innovates with Amazon AI teammates. To get there, we build AI solutions that improve human capabilities and transform entire business functions. We create end-to-end products that surprise and delight out-of-the-box, making complex things easy and hard things possible, with no cloud experience required. We start with customers who embrace the future and build bridges to meet the rest where they are. We pursue ambitious opportunities with conviction, and we are looking for builders who share that mindset.\nAWS Security Assurance Services (SAS) is hiring a Security & Compliance Engineer to design, build, and deploy AWS security and compliance solutions for highly regulated customers. You will own engineering deliverables across the full lifecycle - secure design, implementation, testing, deployment, and maintenance - translating compliance frameworks (SOC2, HIPAA, PCI-DSS, CIS, NIST, FedRAMP) into secure-by-design AWS implementations. You will work autonomously within your team deliver cross-functional projects with partner teams and drive measurable risk reduction for customers at scale. You'll write code ship custom controls run security investigations lead design and code reviews on your team and mentor junior engineers. You will identify systemic issues propose pragmatic solutions and improve the team's mechanisms over time.\nKey job responsibilities\nLead threat modeling security design reviews and architecture reviews for customer engagements; identify and mitigate risks across systems and applications.\nDesign and implement custom preventive, detective, and proactive controls - Service Control Policies (SCPs), Resource Control Policies (RCPs), policy-as-code (cfn-guard, OPA, Rego, Cedar), and automated remediation workflows.\nBuild secure-by-design Infrastructure-as-Code controls for Landing Zones, AWS Control Tower customizations, Zero-Trust architectures, and AI/ML workloads.\nApply AWS security best practices for authentication and authorization, data handling, least privilege, encryption, micro-segmentation, tagging strategy, and API/MCP integration.\nWrite and review IaC scripts enforcements and detections in Python, Terraform, AWS CDK, CloudFormation, and Rego.\nBuild continuous compliance monitoring automated evidence collection visualization reporting and remediation pipelines that hold up in audit.\nIntegrate custom controls with AWS-native and third-party security and compliance tooling.\nDrive emerging-edge ideas into prototyping end-to-end to inform new security and compliance solutions and products.\nIdentify risks and edge cases; propose implementation paths and go/no-go gates.\nApply systematic approaches to risk identification; propose compensating controls when direct remediation isn't possible.\nHelp develop technical content.\nIdentify cross-team patterns, gaps, and improvements.\nTravel to customer sites as needed. About the team Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.\nAmazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating - that's why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.\nWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there's nothing we can't achieve in the cloud.\nHere at AWS, it's in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity and AmazeCon conferences, inspire us to never stop embracing our uniqueness.\nWe're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.\nBasic qualifications\n- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience\n- 3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience\n- Knowledge of networking protocols such as HTTP, DNS and TCP/IP\n- Experience applying threat modeling or other risk identification techniques or equivalent\nPreferred qualifications\n- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience\n- Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP\n- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing\n- Experience writing for developer and technical audiences: blog, product documentation, technical information\n-\nStrong programming and scripting skills in Python, TypeScript, Node.js, Go, Java, or .NET. -\nHands-on Infrastructure-as-Code skills in Terraform, AWS CDK, or CloudFormation. -\nHands-on experience with AWS security and governance services: Config, Security Hub, IAM, KMS, VPC, Lambda, CloudTrail, CloudWatch/EventBridge. -\nExperience deploying SCPs and RCPs in multi-account AWS Organizations. -\nExperience writing and deploying policy-as-code (cfn-guard, OPA Rego, Cedar, or equivalent). -\nExperience designing CI/CD pipelines for security or compliance control deployment. -\nExperience with AWS Control Tower customizations, Landing Zones, or Zero-Trust architectures. -\nWorking knowledge of at least one compliance framework: SOC2, HIPAA, PCI-DSS, CIS, or NIST. -\nExperience producing audit-ready evidence and working with third-party assessors. -\nSpec-driven development; AI agentic design and Model Context Protocol (MCP) experience. -\nIndustry and AWS certifications: AWS Solutions Architect Associate or Professional, AWS Security Specialty, CISSP, or equivalent. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.","description_format":"text","description_chars":7045,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Advertising","Logistics","Streaming & OTT Platforms"],"lifecycle":[{"event":"open","at":"2026-10-15T22:26:23Z"}],"visa":[],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":1,"p_active":0.12,"p_room":0.28,"age_days":135,"expected_fill_days":17,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/amazon-security-compliance-engineer-aws-security-assurance-services-llc","json_url":"https://alion.io/job/amazon-security-compliance-engineer-aws-security-assurance-services-llc.json","meta":{"generated_at":"2026-10-22T04:08:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4336,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19},"rest":"https://alion.io/mcp/rest/get_company?id=19"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famazon-security-compliance-engineer-aws-security-assurance-services-llc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famazon-security-compliance-engineer-aws-security-assurance-services-llc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famazon-security-compliance-engineer-aws-security-assurance-services-llc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amazon-security-compliance-engineer-aws-security-assurance-services-llc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famazon-security-compliance-engineer-aws-security-assurance-services-llc"}]}