Security Compliance Engineer, Ops Compliance & Certification

At Amazon Devices & Services we imagine the future and then create it. Join brilliant minds to build new categories of technology that become part of everyones everyday life. Together we create connected experiences and transform lives communities and the world with our work.

The Compliance & Certification team are looking for a graduate cybersecurity professional to work with many of Amazons world renowned devices and services (such as Ring Blink etc.) by supporting secure infrastructure network security automation compliance and operational monitoring. This role is ideal for someone with hands-on Linux experience practical lab projects scripting ability and academic knowledge of cybersecurity digital forensics incident response ethical hacking and security governance.

You will help configure and monitor embedded systems virtual machines containers firewalls DNS filtering tools and security services. You will also assist with automation using Python and Bash investigate basic security events support secure networking and contribute to technical documentation evidence collection and internal knowledge sharing.


Key job responsibilities
- Maintain accurate technical documentation for security controls infrastructure configurations operational processes and compliance evidence
- Map technical security controls to internal policies standards and compliance requirements
- Support audit preparation by gathering evidence validating documentation and helping respond to audit-related requests
- Track security findings remediation actions and control gaps through to completion
- Ensure infrastructure changes follow approved security compliance and change management requirements
- Support secure infrastructure operations across Linux systems virtual machines containers firewalls DNS filtering tools and security services
- Assist with network security monitoring basic event investigation and operational security checks
- Contribute to automation activities using scripting tools such as Python and Bash to improve monitoring reporting and repeatable operational tasks
- Work with technical teams to document risks security impacts and required remediation steps.
- Translate technical security concepts into clear guidance for both technical and non-technical stakeholders
- Support internal knowledge sharing by documenting procedures lessons learned and technical findings
- Work across cybersecurity infrastructure operations and compliance activities in a structured enterprise environment

A day in the life
A typical week may include reviewing technical evidence for security controls supporting audit requests mapping infrastructure controls to internal policies or security frameworks tracking remediation actions reviewing change records for compliance impact or helping teams document how their systems meet security requirements. The work requires attention to detail strong communication and the ability to translate technical information into clear compliance evidence.

About the team
You will join a cybersecurity compliance team focused on helping the organisation meet its security regulatory and audit obligations while enabling secure technology operations. The team works at the intersection of cybersecurity governance risk management infrastructure and internal control assurance.

Our mission is to make cybersecurity compliance clear evidence-based and practical. We help ensure that security controls are properly defined implemented documented tested and continuously improved. The team supports audit readiness control mapping remediation tracking policy alignment and security governance across enterprise systems and technology processes.

This is a strong environment for someone early in their cybersecurity career who wants to build experience in governance risk and compliance (GRC) while staying close to technical security. The role offers exposure to security frameworks audit preparation technical control validation evidence collection risk remediation policy compliance and enterprise security processes.

- Experience in the Linux environment
- Experience with a scripting language such as PowerShell Python Bash Perl Ruby or similar
- Knowledge of networking fundamentals
- Awareness of cybersecurity principles system hardening ethical hacking and incident response
- Experience with virtual machines containers or lab-based infrastructure

- Degree in Cyber Security Computer Science Information Technology Networking Digital Forensics or a related field
- Experience with Linux Containers or virtualisation platforms
- Experience with Pi-hole Fail2ban Wireshark Nmap or Metasploit
- Exposure to Active Directory or Lightweight Directory Access Protocol (LDAP)
- Experience with IoT systems using ESP32 NodeMCU MQTT InfluxDB or Grafana

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover invent simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( to know more about how we collect use and transfer the personal data of our candidates.

m/w/d

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.