The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave.
Responsibilities
Partner with control owners to clearly document how their controls are designed, implemented and evidenced
Assess the overall shape of your control areas: find gaps, overlaps and conflicts, and make sure controls work together and give appropriate coverage
Work with control owners and senior stakeholders across Legal, Privacy, Procurement, Security and Engineering to translate regulatory, contractual and policy requirements into actionable, testable controls
Build a deep understanding of the operational processes, services and controls that support AWS's security and compliance posture
Evaluate the risk profile of emerging AI platforms and capabilities, and reflect those risks in control design and assessment processes
Requirements
Bachelor’s Degree in Computer Science
Bachelor’s Degree in Information Systems Management
health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
Lead architecture and security design reviews for new and existing technology solutions, create and maintain security architecture diagrams, patterns, and standards, and evaluate security controls across cloud, API, and on-premises environments.
Lead engagement teams in executing TPRM assessments, technology risk reviews, security audits, and advisory engagements across diverse client environments.
Responsibilities
Lead engagement teams in executing TPRM assessments
Develop and enhance TPRM policies, procedures, SOPs, governance frameworks, operating models, and playbooks
Define and implement risk tiering methodologies, assessment criteria, escalation mechanisms, exception management, and reporting structures
Conduct technical control assessments across infrastructure, cloud environments, applications, databases, and network components
Assess third-party security posture against ISO 27001, NIST, PCI DSS, and other applicable cybersecurity frameworks
Security Engineer to run day-to-day security operations, including vulnerability management, remediation, detection, and IT administration.
Compensation
Base salary between $110,000 - $140,000 depending on location and experience. The role will also include equity.
Responsibilities
Vulnerability management: Scan and monitor GCP environment, self-hosted services, and dependencies, prioritize by risk, and track each issue to resolution.
Remediation: Resolve vulnerabilities directly wherever you can, and partner with engineering on larger fixes.
Detection and incident readiness: Maintain security logging, monitoring, and alerting, support incident investigations, and regularly test backups and recovery.
Endpoint security: Deploy and manage EDR and MDM across company devices.
Network security: Manage firewall and egress rules and network segmentation.
Security Assurance Specialist , AWS Compliance & Security AssuranceNewAmazon · Herndon, US
Machine Learning Senior AdvisorThe Cigna Group · Hyderabad, India
Cloud Security ArchitectTEKsystems · Austin, US+4 more
Senior Cybersecurity ArchitectNextEra Energy · Miami, US+1 more
Lead Automation EngineerRoyal Bank of Canada · Toronto, Canada
Security EngineerBlueberry Pediatrics · Remote, US