Cloud Security Specialist (AWS)

Requirements

• 5+ years of hands-on AWS Cloud Security experience.
• Strong experience designing and implementing secure, scalable AWS cloud architectures aligned with security best practices.
• Strong knowledge of AWS security, IAM, network security, security operations, cloud security, Zero Trust, DevSecOps, vulnerability management, and data protection.
• Experience with security engineering, Infrastructure as Code (IaC), scripting, and security automation.
• Demonstrated federal cybersecurity experience, including NIST CSF, NIST SP 800-53, and OMB M-22-09.
• Experience evaluating AWS environments against security standards and the AWS Well-Architected Framework – Security Pillar.
• Strong analytical, troubleshooting, and problem-solving skills with the ability to independently address complex security issues.
• Ability to provide security consultation and technical guidance to cloud engineering teams.
• Strong communication skills with the ability to present security findings, risks, and recommendations to technical and business stakeholders.
• Self-motivated, detail-oriented, and able to work independently.

Certifications

• AWS Certified Security – Specialty – strongly preferred.
• AWS Certified Solutions Architect – Associate or Professional – preferred.

Key Responsibilities

• Conduct regular security reviews and assessments of AWS cloud infrastructure.
• Review Infrastructure-as-Code (IaC) for security risks, misconfigurations, and compliance gaps.
• Identify and document security findings, vulnerabilities, and non-compliant controls.
• Validate AWS environments against security policies, standards, and best practices.
• Assess compliance with the AWS Well-Architected Framework Security Pillar.
• Implement and maintain AWS security controls and hardening standards.
• Develop and maintain AWS security configuration standards, guides, and playbooks.
• Build and maintain cloud security posture dashboards and reporting.
• Provide technical security guidance to engineering teams on secure cloud implementations.
• Identify opportunities to automate security assessments and compliance checks.
• Recommend improvements to security tools, processes, and cloud security capabilities.
• Conduct security awareness and technical training for engineering teams.
• Present security findings, risks, and recommendations to stakeholders.
• Support continuous improvement of the organization''s AWS security posture and compliance program.