Security Engineer, AWS Security Hub, Security Services (S2)

The AWS Security Hub team is looking for a passionate and innovative security engineer with a focus on compliance and security best practices for AWS, Azure, and GCP services. AWS Security Hub is the security and compliance center for AWS customers. One of its main functions is conducting automated checks against cloud security best practices, industry standards, and regulatory frameworks. The person joining Security Hub in this position will lead the effort to define security best practices across AWS, Microsoft Azure, and Google Cloud Platform, including implementation of security controls to assess compliance, remediations to respond to non-compliant events, and mappings to industry standards and regulatory frameworks such as CIS Benchmarks for AWS, Azure, and GCP.

The successful candidate is one who has experience defining technical requirements for compliance and security best practices across multiple cloud providers. You should be comfortable looking at a cloud service — whether AWS, Azure, or GCP — and identifying what security controls should be in place to help customers be confident that they are using that service in a secure way. You should be comfortable developing requirements that developers can utilize to translate security controls into automated checks and remediation procedures. You should also be comfortable implementing automated checks in Python or a supported language, including developing multi-cloud controls that evaluate Azure and GCP resource configurations through AWS Config.

A key aspect of this job is the ability to earn trust with large network of stakeholders: AWS service owners, security expects in our solution architecture and consulting teams, Security Hub’s development team, and, most importantly, our customers. In addition to being a technical expert in security best practices and compliance, you will be a leading voice in the effort to raise the bar for security and compliance across AWS.

…