{"id":3281667,"url":"https://alion.io/job/amazon-security-compliance-engineer-i-aws-security-assurance-services-llc","title":"Security & Compliance Engineer I, AWS Security Assurance Services, LLC","company":{"id":19,"name":"Amazon","domain":"amazon.com","url":"https://alion.io/company/amazon","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":78,"open_postings":4528,"ghost_share":0,"stale_share":0.89,"repost_share":0.002,"time_to_fill_p50_days":22,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States","Nashville, United States","Seattle, United States","Arlington, United States","Herndon, United States","Houston, United States","Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":132500,"max":179200,"currency":"USD","period":"year","gross":null,"usd_annual":179200},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"CloudFormation","optional":false},{"name":"FedRAMP","optional":false},{"name":"HIPAA","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SAS","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Amazon CloudWatch","optional":true},{"name":"Amazon EventBridge","optional":true},{"name":"AWS Lambda","optional":true},{"name":"C++","optional":true},{"name":"DNS","optional":true},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true},{"name":"Java","optional":true},{"name":"PowerShell","optional":true},{"name":"Ruby","optional":true},{"name":"TCP/IP","optional":true}],"status":"live","first_seen_at":"2026-10-26T16:39:36Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-28T23:47:11Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"As part of the AWS Applied AI Solutions organization, we have a vision to provide business applications, leveraging Amazon’s unique experience and expertise, that are used by millions of companies worldwide to manage day-to-day operations. We will accomplish this by accelerating our customers’ businesses through delivery of intuitive and differentiated technology solutions that solve enduring business challenges. We blend vision with curiosity and Amazon’s real-world experience to build opinionated, turnkey solutions. Where customers prefer to buy over build, we become their trusted partner with solutions that are no-brainers to buy and easy to use.\nAWS Security Assurance Services (SAS) is hiring an Associate Security & Compliance Engineer to help build and operate AWS security and compliance solutions for highly regulated customers. You will execute your team’s security processes, contribute to runbooks and tooling, write and review code and Infrastructure-as-Code, and help ship secure-by-design implementations aligned to compliance frameworks (SOC2, HIPAA, PCI-DSS, CIS, NIST, FedRAMP).\nYou’ll work on well-defined security problems with regular checkpoints from your team, learn from peer review, and grow your skills in secure design, threat modeling, and AWS security engineering. You will be a reliable contributor on customer engagements and a strong security advocate within your team.\nKey job responsibilities\nImplement custom security controls, enforcements, detections, and automated remediations\nContribute to Infrastructure-as-Code modules for Landing Zones, AWS Control Tower customizations, and security baselines using Terraform, AWS CDK, or CloudFormation.\nWrite Python and policy-as-code (cfn-guard, OPA Rego, Cedar) to extend preventive and detective controls.\nParticipate in code, IaC, and design reviews; provide constructive feedback\nContribute to POCs on emerging technologies; implement components, run experiments, and document findings so the team can build on the results.\nImplement continuous compliance monitoring checks, evidence collection automations, and reporting dashboards.\nHelp identify, confirm and document risks and mitigations during design and implementation stages of customer engagements.\nApply common risk trade-offs (e.g., tactical compensating controls vs. addressing root causes) under guidance.\nContribute to runbooks, tools, and other security mechanisms used by the team and customers.\nParticipate in operational support; help ensure root causes of operational and security issues are identified and resolved.\nFollow established procedures to diagnose problems, and escalate appropriately when blocked.\nCommunicate security risk for low-complexity problems clearly in writing and verbally to your team and direct leadership.\nSolicit differing views and learn from peer feedback.\nTravel to customer sites as needed. About the team The AWS Security Assurance Services team, within AWS Support, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads requires reliable delivery of bar-raising security outcomes and investment in security mechanisms and automation on behalf of our customers. AWS Security Assurance Services LLC, a PCI-QSAC and HITRUST External Assessor Firm, is a team of industry-certified assessors and Compliance Engineers with DevOps and Cloud Infrastructure Architect backgrounds, helping our customers achieve, maintain, and automate compliance in the cloud by tying applicable audit standards to AWS service-specific features and functionality. The SAS team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating - that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity and AmazeCon conferences, inspire us to never stop embracing our uniqueness. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.\nBasic qualifications\n- 2+ years of web protocols, common security attacks, and remediation (non-internship) experience\n- Bachelor's degree in Engineering, Computer Science, or a related field\n- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent\n- Experience with web protocols, common security attacks, and remediation (non-internship)\n- Experience solving basic problems by writing code or scripts with some assistance\n- Experience in web security, or experience demonstrating software engineering skills in a previous intership, work experience, coding competitions, or publications and experience in networking administration and troubleshooting\n- 1+ years of cloud architecture and solution implementation experience, or US government security clearance of top secret or above\n- Experience working effectively on milestone-driven projects\n- Experience in identifying incomplete or inaccurate data, identifying the root cause and creating/implementing an escalation plan, or experience communicating results to senior leadership\n- Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security\n- Experience communicating clearly and concisely with leadership, stakeholders, and cross-functional teams\n-\nExperience demonstrating software engineering skills in a previous internship, work experience, coding competitions, or publications, or experience that includes strong analytical skills, attention to detail, and effective communication abilities\nPreferred qualifications\n- Experience with AWS services or other cloud offerings\n- 1+ years of cloud based solution (AWS or equivalent), system, network and operating system experience, or AWS Professional level certification\n- Knowledge of networking protocols such as HTTP, DNS and TCP/IP\n- Experience coding, scripting, automating in at least one language (e.g., Python, C, C++, Java, Ruby, or PowerShell)\n- Experience writing technical articles, speaking at technology conferences, and contributing to open source\n- • Experience with compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST\n- • Hands-on experience with AWS security and governance services: Config, Security Hub, IAM, KMS, VPC, Lambda, CloudTrail, CloudWatch/EventBridge.\n- • Familiarity with AWS core services and at least one Infrastructure-as-Code tool (Terraform, AWS CDK, or CloudFormation).\n- • Exposure to policy-as-code tools (cfn-guard, OPA Rego, Cedar, or equivalent).\n- • Internships, projects, or coursework in cloud security, application security, or compliance automation.\n- • Familiarity with multi-account AWS Organizations and Service Control Policies.\n- • Industry or AWS certifications: AWS Certified AI Practitioner, AWS Solutions Architect Associate, AWS Security Specialty, or equivalent (or willingness to earn within the first year).\nAmazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.\nOur inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.\nThe base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.\nUSA, TN, Nashville - 132,500.00 - 179,200.00 USD annually\nUSA, TX, Austin - 136,000.00 - 184,000.00 USD annually\nUSA, TX, Dallas - 136,000.00 - 184,000.00 USD annually\nUSA, TX, Houston - 136,000.00 - 184,000.00 USD annually\nUSA, VA, Arlington - 136,000.00 - 184,000.00 USD annually\nUSA, VA, Herndon - 136,000.00 - 184,000.00 USD annually\nUSA, WA, Seattle - 136,000.00 - 184,000.00 USD annually","description_format":"text","description_chars":10152,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Flexible schedule","Health insurance","Parental leave","Restricted stock units"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Robotics AI","Logistics & Warehouse Robotics","Video Production"],"lifecycle":[{"event":"open","at":"2026-10-26T16:39:36Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 16,768 · green card filings: 56","filings_12m":16768,"filings_prev_12m":16262,"green_card_filings_12m":56,"median_offered_wage_usd":162609,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":838}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":22,"reasons":["conf:4","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":179200,"is_top_pay":true},"html_url":"https://alion.io/job/amazon-security-compliance-engineer-i-aws-security-assurance-services-llc","json_url":"https://alion.io/job/amazon-security-compliance-engineer-i-aws-security-assurance-services-llc.json","meta":{"generated_at":"2026-10-29T03:30:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5363,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19},"rest":"https://alion.io/mcp/rest/get_company?id=19"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famazon-security-compliance-engineer-i-aws-security-assurance-services-llc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famazon-security-compliance-engineer-i-aws-security-assurance-services-llc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famazon-security-compliance-engineer-i-aws-security-assurance-services-llc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amazon-security-compliance-engineer-i-aws-security-assurance-services-llc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famazon-security-compliance-engineer-i-aws-security-assurance-services-llc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3281667}},{"tool":"search_jobs","arguments":{"company":"amazon.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3281667},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}