AWS Security Lead Engineer

Quick Facts

• Role: AWS Security Lead Engineer
• Focus: Security engineering for AWS Cloud products and services
• Work model: Remote

Description

You will provide technical leadership while working hands-on on security engineering for AWS Cloud environments. The role includes designing security standards and guardrails, building Proof of Concepts, automating security processes, and helping developers, DevOps, and SRE teams implement secure solutions. You will also handle security governance across compliance, risk management, and incident response readiness.

Responsibilities

• Contribute to security strategy and compliance standards, including risk management and incident response
• Apply Secure by Design practices across the full software development lifecycle
• Define and implement AWS security policies, guardrails, and control mechanisms
• Build Proof of Concepts for new security approaches and mechanisms
• Coordinate and review penetration testing outcomes and design remediation actions
• Implement core security capabilities such as encryption, access controls, identity and permissions management
• Perform security code reviews and configuration reviews for vulnerabilities and best-practice compliance
• Use SAST/DAST, threat modeling, and security testing during development
• Integrate security controls into CI/CD pipelines and automate cloud security processes
• Collaborate with Software Engineers, DevOps, SRE, and Architects on scalable and secure solutions
• Continuously assess security risk and report risks to stakeholders
• Support teams in creating and applying secure cloud service configurations
• Ensure traceability of security requirements across the product lifecycle
• Maintain compliance with CRA, NIS2, ISO/IEC 27001, and NIST
• Promote security best practices and raise security awareness in technical teams

Requirements

• 5–8 years of experience in Security Engineering, Cloud Security, or a similar security-related technical role
• Practical, in-depth knowledge of AWS Cloud Security
• Experience designing and implementing AWS security protections, including IAM, Security Hub, GuardDuty, CloudTrail, Prisma Cloud, or similar AWS security services
• Hands-on Secure Software Development experience: code review, SAST/DAST, threat modeling, and implementing security mechanisms
• Ability to program in Python or JavaScript/TypeScript to build PoCs and automate security processes
• Experience with Infrastructure as Code: Terraform, CloudFormation, or AWS CDK
• Experience securing CI/CD pipelines in DevSecOps: GitHub Actions, GitLab CI, AWS CodePipeline
• Strong understanding of authentication & authorization, encryption, identity management, least privilege, and secure configuration
• Knowledge of application and cloud-native security
• Knowledge of standards/regulations: ISO 27001, NIST, NIS2, CRA
• Ability to design scalable, secure, and maintainable solutions
• Excellent communication skills with both technical and business audiences
• Autonomy and proactive mindset, able to act as a technical leader in Cloud Security

Benefits

• Professional and personal development support with individualized career planning
• Training, certifications, and conference support (co-funded or fully covered)
• SmartChange: ability to influence project selection for better fit
• Work-life balance with social events, sports activities, and webinars
• Physical activity support and access to training rooms
• Health package including private care, sports card, insurance, and psychological support platform
• Flexible benefits via points in the benefits system