Infrastructure Engineer II - AWS Security Operations Engineer

WHO YOU ARE:

A skilled AWS Security Operations Engineer to join our cloud infrastructure team. This role bridges the gap between security governance and cloud operations, ensuring AWS environments remain compliant, secure, and aligned with organizational policies. The individual will work closely with the Security and Platform Engineering teams to translate governance requirements into actionable configurations, automated workflows, and monitoring solutions.

WHAT YOU’LL DO:

• Partner with the Security team to interpret security policies, controls, and governance requirements, and operationalize them across AWS environments.
• Implement and manage AWS security controls including IAM roles and policies, Security Groups, GuardDuty, Security Hub, and Config Rules.
• Investigate and resolve AWS security findings, alerts, and compliance violations.
• Develop and automate security runbooks to improve response times and consistency.
• Monitor AWS accounts for ongoing compliance with security best practices and company policies.
• Continuously assess AWS configurations for vulnerabilities and misconfigurations.
• Support incident response processes, including analysis and remediation of security events in AWS.
• Collaborate with DevOps and platform engineering teams to integrate security into CI/CD pipelines.
• Leverage AWS-native and third-party tools for visibility, alerting, and automation.
• Document and communicate security procedures, operational playbooks, and remediation workflows.

WHAT YOU’LL NEED:

• Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).
• Experience: 3–5 years of experience working in cloud security or cloud operations roles.
• Strong hands-on experience securing and operating AWS environments.
• Proven ability to translate governance and policy requirements into technical configurations.
• Deep knowledge of AWS security architecture and services (IAM, KMS, Security Hub, GuardDuty, Config, CloudTrail, CloudWatch).
• Experience with automation tools such as Lambda, Terraform, or CloudFormation.
• Familiarity with vulnerability management, SIEM systems, and incident response workflows.
• Proficient in scripting languages (Python, Bash, PowerShell).
• AWS Certified Security – Specialty (Preferred)
• AWS Certified Solutions Architect – Associate or Professional (Preferred)
• CISSP or equivalent security certification (Preferred)
• Strong analytical and problem-solving skills with a proactive mindset.
• Ability to collaborate effectively with both Security and Engineering teams.
• Excellent written and verbal communication skills.
• Commitment to continuous learning and adapting to evolving AWS services and security practices.

WHAT’S IN IT FOR YOU?

Zinnia offers excellent career progression and competitive compensation. We’re looking for the best and brightest innovators in the industry to join our team. At Zinnia, you collaborate with smart, creative professionals who are dedicated to delivering cutting-edge technologies, deeper data insights, and enhanced services to transform how insurance is done. Visit our website at www.zinnia.com for more information. Apply by completing the online application on the careers section of our website. We are an Equal Opportunity employer committed to a diverse workforce. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability.

#LI-UM1