AWS Security Architect - Threat Modeling

Set security requirements for AWS services, Infrastructure as Code, containers, APIs, data, and AI platforms.

• Develop reusable security patterns and automate policy controls using tools such as Terraform Sentinel.

Qualifications:

• Deep experience securing AWS environments, including IAM, networking, storage, databases, serverless, containers, messaging, and CI/CD services

• Strong background in information security architecture, application security, cloud security, and Infrastructure as Code security

• Hands on threat modeling experience using STRIDE, attack trees, data flow analysis, and trust boundary analysis

• Knowledge of CI/CD and DevSecOps security controls, including policy as code tools such as Terraform Sentinel

• Experience with data security, encryption, key management, access controls, API security, and identity and access management

• Familiarity with security standards and frameworks such as NIST, OWASP, CIS Benchmarks, FedRAMP, ISO, and SOX

• Ability to turn security findings into clear, practical controls and guidance for technical teams