AWS Cloud Security Engineer

Resource 1 is in need of an AWS Cloud Security Engineer for a remote contract role with our client based in Oak Brook, IL. Initial contract term will be 3 months with potential extensions. The engagement focuses on AWS security hardening and remediation of vulnerabilities identified by recent penetration testing for a globally distributed platform at scale. The resource will help implement and operate AWS security tooling, tighten IAM and S3 permissions, apply patches, and work with security and development teams to keep the platform secure without disrupting service. The role requires hands-on AWS security experience and the ability to run independently across security projects.

Responsibilities:

·         Remediate penetration testing findings and perform security hardening across the AWS environment.

·         Implement and operate AWS security services such as GuardDuty, Inspector, Security Hub, and AWS Config.

·         Tighten IAM roles, policies, and permissions to follow least-privilege practices.

·         Review and remediate S3 permissions and other data access controls.

·         Apply OS and service patching to operating environments with minimal customer impact.

·         Collaborate with development teams to remediate impacted packages and deploy fixes.

·         Work with external security tooling and partners (e.g., Rapid7) to triage and resolve issues.

·         Participate in project planning, deliverable tracking, and communicate status to managers and business leaders.

Required Skills & Experience:

·         5-10+ years of relevant cloud/security engineering experience and ability to onboard quickly and work independently.

·         Deep, recent hands-on AWS expertise at scale (ideally production environments supporting millions of devices/users).

·         Proven experience with AWS security services: GuardDuty, Inspector, Security Hub, and AWS Config.

·         Strong knowledge of IAM design, roles, policies, and access controls.

·         Experience securing S3, VPC/network controls, security groups, and related access mechanisms.

·         Experience with containerized workloads and Kubernetes (EKS) and EC2/Linux administration.

·         Practical Terraform experience for infrastructure as code.

Plusses:

·         Experience with Rapid7 or similar commercial security tooling.

·         Hands-on experience with IoT or large device fleets.

·         Familiarity with GitHub Actions or other CI/CD tooling.

·         Experience using Gen AI tools to augment cloud engineering workflows.

Medical insurance and a 401(k) plan is offered to all eligible W2 employees.