Heba Abdelnaby

About Heba Abdelnaby

I’m an Infrastructure Security Engineer with 15+ years of experience securing large-scale cloud, data center, and hybrid environments.My work sits at the intersection of infrastructure security engineering and regulatory assurance. I validate real production systems—configs, logs, networks, CI/CD pipelines—and partner directly with engineers to identify risk, design secure-by-design controls, and drive remediation at scale.At AWS, I support global data-center and infrastructure platforms by performing hands-on security assessments and leading technical responses to external audits and regulatory reviews (FedRAMP, SOC, PCI, HITRUST, and international regulators). I regularly engage with engineers, customers, auditors, and legal teams to translate regulatory requirements into practical, engineer-friendly security controls that improve resilience and withstand external scrutiny without slowing delivery.Earlier in my career, I designed and secured large-scale network and cloud infrastructures, led deep technical security assessments, reviewed system and application code, and drove remediation across hundreds of global sites.I bring an audit mindset to engineering work—using regulatory pressure as a tool to surface systemic risk, strengthen production security, and build systems that are defensible in high-stakes environments.

Experience

1. Infrastructure Security Compliance Engineer

   Amazon Web Services (AWS)

   Jun 2024 — Present · Seattle, WA, US

   Security Engineer and compliance professional with deep expertise in AWS infrastructure, global data centers, cloud architectures, and regulatory frameworks. Represent AWS Infrastructure in enterprise-wide audits, ensuring readiness and continuous compliance across global data centers, regions, and supporting AWS services including Route 53, CloudFront, and Global Accelerator. Operate as a subject matter expert across U.S, European, and Asian regulatory audits, delivering security assurance, shaping enterprise-wide security policy, and partnering with engineering, legal, and security assurance teams to strengthen control environments, reduce risk, and drive effective remediation. Known for translating complex compliance requirements into practical, scalable security strategies that support AWS\'s expanding infrastructure, security posture, and customer trust.

Education

• Cairo University

  Bachelor's degree, Electronics & Communications Engineering

• Harvard Business School Online

  Data Privacy & Technology

• Bellevue College

  Technical Writing

Skills

• IT Service Management
• Integration
• Service Delivery
• C++
• Data Center
• Troubleshooting
• Security
• Telecommunications
• Networking
• Network Traffic Analysis
• Application Analysis
• Unix
• Management Reporting