AVP,AWS Security Engineer Job Greensboro area,North Carolina USA,IT/Tech

Codify and continuously improve LPL's cloud control library — Security Hub CSPM as today's AWS-native control system, AWS Config with custom conformance packs to express controls as code, and additional control-management systems as the landscape evolves — and triage, investigate, and drive resolution of Security Hub findings within CCOE
Partner with the Security Engineering team within LPL's enterprise Information Security organization (a peer of Security Architecture), which manages Wiz, to jointly monitor Wiz signal and drive resolution of Wiz findings, recognizing that Wiz and Security Hub findings frequently diverge
Contribute directly to the Account Factory for Terraform (AFT) foundational base layer — security-control modules, Service Control Policies, AWS Config conformance packs, and reference patterns — so the secure-by-default posture is a property of the platform every account inherits
Support LPL's enterprise vulnerability management department on cloud‑workload findings: assist with triage, prioritization, and remediation guidance for findings that originate in or affect AWS, without owning vulnerability management end‑to‑end
Operate as the security & governance partner across every CCOE team and pod — Foundations (Fin Ops, Functional Design Engineering & Strategy, Network Engineering, Monitoring), Platforms, Containers, Support, and Delivery — since Security & Governance is involved in every aspect of CCOE; embed security and governance review into design, code, and delivery touchpoints
Partner closely and day‑to‑day with the Network Engineering pod within Foundations (VP, AVP, and engineers) on shared network‑security controls: segmentation and micro‑segmentation, ingress/egress inspection, encryption in transit, WAF, Shield, and certificate lifecycle
Collaborate cross‑organization with Security Architecture and Security Engineering — peer teams within LPL's Information Security organization — to evaluate, pilot, and operationalize additional security solutions (CNAPP, CSPM, CWPP, runtime defense, DSPM, secrets scanning) and to ensure CCOE's posture meets Info Sec and application‑team requirements
Translate regulatory requirements (FINRA, SEC, PCI, SOX) into automated, code‑reviewed controls; lead cloud‑security incident response within CCOE's scope as a senior responder; partner with Internal Audit and Information Security on evidence collection, attestation, and audit response; drive blameless post‑incident reviews to durable control improvements
Embed agentic AI capabilities into the team's engineering practice (e.g., Cursor, Claude Code, Bedrock, MCP servers, agentic IaC and review workflows) and into the platform's self‑service experience for internal customers
Embed agentic AI capabilities into security governance: AI‑assisted triage of Security Hub and Wiz findings, automated control authoring (Terraform and AWS Config conformance pack drafts from natural‑language intent), conversational interfaces for control inquiries, and MCP‑backed agents that join Security Hub, AWS Config, Wiz signal, and Terraform context into one queryable view
Operate as a hands‑on senior cloud engineer: spend the majority of your time in Terraform code, security tooling configuration, vulnerability remediation, design reviews, peer reviews, and incident response — hands‑on engineering is the primary leverage point
Personally participate in 24x7 on‑call rotations as a senior technical responder and escalation point for production incidents
Partner with peer engineers, AVPs, and VPs across the Cloud Center of Excellence — the five CCOE teams (Foundations, Platforms, Containers, Support, Delivery) and the five Foundations pods (Security & Governance, Fin Ops, Functional Design Engineering & Strategy, Network Engineering, Monitoring) — to align roadmaps and remove cross‑team and cross‑pod blockers
Champion AWS Well‑Architected Framework adoption (with emphasis on the Security pillar) and drive continuous improvement against operational, security, reliability, and compliance outcomes
Contribute to the private Terraform module library and the Account Factory for Terraform (AFT) foundational base layer,…

AVP, AWS Security Engineer