Aws Cloud Security

Aws Cloud Security Engineer Jobs

5 jobs found

Today

Senior Software Security Engineer, Infrastructure & Identity

DepthFirst San Francisco, CA

San Francisco, CA

Today

Full time Senior Aws Cloud Security Cloud Platforms

Apply Now

Job Description

DepthFirst is building security foundations for its infrastructure as the company scales. This onsite role in San Francisco, CA gives you ownership over cloud security posture, identity and access management, and practical security tooling that helps engineering teams move faster with safer defaults.

What you’ll do

As one of the first security engineers, help shape infrastructure security foundations by identifying the highest-impact risks and driving improvements from design through production.
Improve cloud security posture across IAM, networking, and system security, building controls that make secure configurations the default.
Strengthen identity and access management across infrastructure and product by partnering on authentication, authorization, human and workload identities, and secrets management.
Write and maintain production software, tooling, and automation to prevent security issues, detect configuration drift, and reduce manual security work.
Collaborate with infrastructure and product engineers to review designs, address vulnerabilities, and deliver security improvements that scale with the business.
Help mature centralized security logging and detection and response capabilities as the security function grows.

What you bring

Strong software engineering skills with deep understanding of security principles, best practices, and common vulnerabilities.
A proactive mindset to spot security gaps or inefficiencies and address them through automation and tooling.
A track record delivering scalable solutions and driving impactful change across infrastructure in real-world projects.
Expertise in cloud platform security, including Amazon AWS; familiarity with container security, orchestration security, and authentication and authorization.
Strong written and verbal communication skills, including the ability to explain complex security topics to technical and non-technical audiences.

Technologies

Amazon AWS

Benefits

Competitive salary with meaningful equity
Health, vision, and dental insurance
Office lunch and dinner (SF office)
Ownership and significant room to grow as the company scales

Bonus points if you have experience at a high-growth startup or early-stage company, or familiarity with security, infrastructure, or developer tooling markets.

View full job page →

Today

Cloud Security Engineer (DevOps)

Liberty Personnel Services, Inc, LP89679 Westminster, CO

Westminster, CO

Today

$150k+/yr Full time Aws Cloud Security Cloud Platforms Cloud Security

Apply Now

Job Description

Own and embed security across cloud infrastructure, applications, and CI/CD pipelines in a modern, continuously deployable environment.

Responsibilities

Design, implement, and maintain multiple security applications and services in a cloud environment
Work within CI/CD practices to integrate security into release and deployment workflows
Troubleshoot and resolve security-related issues across networks, pipelines, and infrastructure
Build, maintain, and monitor the configuration of security tools
Develop security monitoring capabilities with alerting and metrics using log aggregators and data collectors
Serve as a collaboration conduit between security-focused and development-focused teams
Provide configuration management support for production applications and custom code
Support vulnerability management across applications and infrastructure
Apply a range of open-source technologies to solve security problems
Support automation around security tooling and cloud security controls
Contribute to secure infrastructure design across enterprise systems
Provide some on-call or after-hours onsite support in a secure environment as needed for the customer’s mission

Requirements

U.S. citizen with an existing SECRET security clearance
Ability to obtain TS/SCI with CI Polygraph
CompTIA Security+ or other DoDD 8140 certification
5+ years of DevOps, software, or infrastructure engineering experience
Bachelor’s degree (or 4 additional years of experience in lieu of degree)
Cloud service experience
Experience with Terraform and Kubernetes (K8S) or equivalent technologies
Ability to quickly learn and use a wide variety of open-source technologies
Willingness to work 90% or as needed in a secure environment
Willingness to provide some on-call or after-hours onsite support
Role location: Colorado (Westminster or Longmont)

Technologies

Terraform
Kubernetes (K8S)
Open-source tools
Cloud services
CI/CD platforms
Log aggregation, alerting, monitoring tools
Configuration and vulnerability management
Python, Java
Jenkins
AWS
Compliance tooling
Vulnerability detection tools
Intrusion detection and prevention tools
Change management and detection tools
Code analysis tools
Counterintelligence polygraph

What You’ll Work On

Cloud-based security applications and services
Enterprise common infrastructure and shared services
CI/CD-driven environments and automated pipelines
Security tooling configuration, tuning, and monitoring
Log aggregation, alerting, and security metrics
Configuration and vulnerability management for production applications
Custom application and code security support

Experience That Will Get Attention

Security-minded DevOps (or DevOps-minded security) building automation for monitoring, compliance, and vulnerability detection
Experience turning logs and metrics into actionable security posture, not only dashboards
Hands-on CI/CD exposure (for example, Jenkins)
Scripting experience in Python or Java
Automated deployment and maintenance of security tools across monitoring, intrusion detection/prevention, change detection, and code analysis

High-Signal Experience

AWS certification or other cloud provider certification
Jenkins or similar CI/CD tools
Python and/or Java
Terraform and Kubernetes
Monitoring, compliance, and vulnerability detection tools
Intrusion detection and prevention tooling
Change management and detection tools
Code analysis tools
Custom source application development and maintenance

Location: Westminster, CO 80234 (onsite)

Salary: USD 150,000 per yearly

Minimum Experience: 5 years

Education: Bachelor’s degree

View full job page →

1d ago

Lead Cloud Security Engineer

Cognizant New York, NY

New York, NY

1d ago

$115k - $134k/yr Full time Agentic Soc Analytics Application Security

Apply Now

Job Description

Lead Cloud Security Engineer role in New York, NY (onsite) focused on automated containment and agentic SOC capabilities across enterprise security environments.

Responsibilities

Design and implement automated containment workflows across SIEM, SOAR, endpoint, identity, network, and cloud security platforms
Create incident response playbooks for endpoint isolation, account restriction, malicious IP blocking, credential containment, and cloud workload quarantine
Define automation eligibility criteria, approval requirements, rollback procedures, exception handling, and human-in-the-loop controls
Architect and implement an agentic SOC roadmap, including custom security agent patterns, orchestration workflows, and MCP integrations
Build integrations between security platforms, AWS services, case-management systems, and enterprise APIs using Python and secure API patterns
Validate automated response and containment via testing, Purple Team exercises, and incident response simulations
Develop cloud-native security automation using AWS, EKS, Terraform, and related platform services
Collaborate with Cyber Defense, SOC, Incident Response, Cloud Security, IAM, and infrastructure teams to operationalize response capabilities
Create operational metrics and dashboards to track automation coverage, response times, containment success, exceptions, and operational effectiveness
Produce architecture documentation, containment playbooks, runbooks, support procedures, and knowledge-transfer materials for transition into BAU operations

Requirements

8+ years of experience in Cybersecurity Engineering, Security Operations, Cloud Security, Incident Response, or Security Automation
Strong hands-on expertise in AWS security services, cloud-native architecture, and security operations in enterprise environments
Experience designing automated incident response and containment workflows across SIEM, SOAR, EDR, IAM, network, and cloud platforms
Strong programming and automation skills using Python, APIs, and event-driven integration patterns
Hands-on experience with Terraform and Infrastructure as Code for secure, repeatable deployments
Experience with AWS EKS, containerized workloads, Kubernetes security, and cloud workload containment strategies
Understanding of agentic SOC architectures, AI-enabled security workflows, MCP integrations, and human-in-the-loop automation controls
Experience using Git-based development and CI/CD tools such as Bitbucket or equivalent platforms
Strong knowledge of incident response, Purple Team testing, approval controls, rollback mechanisms, and exception-management processes
Strong architecture, troubleshooting, documentation, stakeholder communication, and operational transition skills

Technologies

SIEM, SOAR, EDR, IAM
AWS, AWS EKS, Kubernetes, containerized workloads
Python, APIs, event-driven integration patterns
Terraform, Infrastructure as Code
agentic SOC architectures, AI-enabled security workflows, MCP integrations
human-in-the-loop automation controls
Git-based development, CI/CD, Bitbucket

Benefits

Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
401(k) plan and contributions
Long-term/Short-term Disability
Paid Parental Leave
Employee Stock Purchase Plan

Practice (CIS - Cloud, Infrastructure, and Security Services)

Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS) supports digital transformation through holistic modernization across layers
Helps customers transform infrastructure and workplace to meet evolving needs of the digital era
Holistic approach emphasizes cloud-driven modernization and workplace and operational transformation to run the business in a secure environment

Compensation

Annual salary: USD 114,500 - 134,000 (based on experience and other qualifications)
Eligible for Cognizant’s discretionary annual incentive program based on performance, subject to plan terms

View full job page →

1d ago

Senior AI/Cybersecurity Solutions Engineer

RCG Suitland, MD

Suitland, MD

1d ago

$130k - $140k/yr Full time Senior Agent Ai Security

Apply Now

Job Description

RCG is seeking a Senior AI/Cybersecurity Solutions Engineer for a federal Security, Architecture, and Engineering (SAE) team in Suitland, MD (100% onsite). This hands-on role combines generative and agentic AI security automation on AWS with NIST 800-53 assessment support, remediation workflows, and compliance evidence generation.

What you’ll get

Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA) and 401(k) with company match
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (Vacation, Sick & Public Holidays)
Family Leave (Maternity, Paternity)
Short Term & Long Term Disability
Training & Development
Wellness Resources

Responsibilities

Design and implement Amazon Bedrock agent action groups, including OpenAPI schemas and Python Lambda execution layers.
Develop Retrieval-Augmented Generation (RAG) pipelines using Bedrock Knowledge Bases, leveraging sources such as NIST 800-53, CIS Benchmarks, organizational System Security Plans (SSPs), and threat intelligence.
Engineer prompts, guardrails, and input validation to improve accuracy, security, and resistance to prompt-injection attacks.
Evaluate and evolve foundation-model strategies as AI capabilities and platform requirements mature.
Develop AI-assisted capabilities for security assessment, remediation, hardening, alert triage, and compliance workflows.
Build automated NIST 800-53 control assessments and security evidence collection capabilities.
Develop remediation and hardening automation across AWS services, including S3, EC2, IAM, CloudTrail, ECS, and EKS.
Integrate live data from AWS Security Hub, GuardDuty, Inspector, and Config to support environment-aware security analysis and AI-assisted decision-making.
Support BOD 26-04 SLA logic, CISA KEV correlation, risk enrichment, and remediation SLA tracking.
Support telemetry aggregation and integration with SIEM technologies, including Microsoft Sentinel and AWS Security Lake.
Support ECR vulnerability scanning, EKS runtime monitoring, and container configuration hardening.
Develop and analyze Software Bills of Materials (SBOMs) using SPDX and CycloneDX.
Correlate vulnerabilities with CISA Known Exploited Vulnerabilities (KEV) to support risk-based prioritization.
Perform supply-chain security checks, including detection of typosquatting and unsigned container images.
Maintain GitLab CI/CD pipelines for linting, testing, security scanning, builds, and deployments.
Implement secure OIDC-based AWS authentication.
Develop and manage Infrastructure as Code using CloudFormation and/or Terraform with least-privilege IAM.
Support deployment and rollout verification across application and Kubernetes/EKS environments.
Maintain strong Git practices (branching, merge requests, and clean version-control history).
Manage engineering work through Jira and maintain engineering documentation in Confluence.
Produce technical design documentation, evidence packages, and artifacts capable of supporting federal security assessments and audits.
Maintain traceability between requirements, engineering work, code, deployments, and security evidence.
Take primary ownership of assigned technical workstreams and collaborate closely with cybersecurity and engineering team members.

Requirements

Bachelor’s degree in computer science, Cybersecurity, or a related technical discipline.
6+ years of cloud security engineering experience.
2+ years of production experience with generative AI/LLM technologies.
4+ years of experience working with AWS security services.
3+ years of experience supporting federal compliance frameworks such as NIST, FedRAMP, and FISMA.
2+ years of active experience with Jira and Confluence in an Agile or technical delivery environment.
Expert-level Python development (Python 3.11+, boto3, type hints, robust error handling).
Advanced experience with Amazon Bedrock (agents, action groups, Knowledge Bases, guardrails, prompt engineering, RAG).
Expert knowledge of AWS security technologies, including Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, and OIDC.
Advanced container security experience with ECR, ECS/EKS, image scanning, runtime monitoring, and hardening.
Expert knowledge of NIST SP 800-53 Rev. 5, including control families, assessment procedures, and evidence requirements.
Advanced experience with CI/CD and Infrastructure as Code, including GitLab CI and CloudFormation and/or Terraform.
Advanced Git/version-control experience.
Demonstrated experience managing technical work in Jira and maintaining team documentation in Confluence.

Preferred Qualifications

Master’s degree in a related technical discipline.
3+ years of experience building production AI agents.
Experience supporting ATO and continuous monitoring activities.
Experience administering or configuring Jira boards and Confluence spaces.
Experience supporting federal IT security programs.
Familiarity with CISA Binding Operational Directives, including BOD 22-01 and BOD 26-04.
Experience with AWS Security Lake, OCSF, OSCAL machine-readable compliance, or Microsoft Sentinel integration.
Experience with AI red teaming or adversarial testing of LLM applications.
Familiarity with software supply-chain technologies such as SLSA, Sigstore, and in-toto.
Certifications such as AWS Certified Security – Specialty, CISSP, CISM, CKS, or AWS machine learning certification are preferred.

Work environment

This is a full-time, 100% onsite position in Suitland, MD supporting a federal government cybersecurity and enterprise IT environment. The technical environment includes AWS, Amazon Bedrock, EKS, GitLab, GitLab CI, AWS CodePipeline, Jira, Confluence, Python, VS Code, and Jupyter Notebook, along with related cloud and cybersecurity technologies.

Eligibility

Must be a U.S. Citizen or Lawful Permanent Resident and must be eligible to obtain and maintain a Public Trust.
Employment is contingent upon successful completion of all applicable government background investigation and customer onboarding requirements.

View full job page →

2d ago

AVP, Network Security Engineer

LPL Financial Corp Fort Mill, SC

Fort Mill, SC

2d ago

$104k - $173k/yr Full time Aws Cloud Security Cybersecurity Tools Ddos Defense

Apply Now

Job Description

LPL Financial Corp seeks an AVP Tech Network Engineer, Security to design, engineer, and operate network security solutions and supporting orchestration capabilities.

Responsibilities

Design and engineer network security solutions using Palo Alto, Cisco FTD, and Fortinet firewalls
Develop automation using scripting languages such as Python or PERL, leveraging APIs for data exchange
Engineer and operate VPN and Cisco ISE/NAC remote access environments
Implement firewall solutions in AWS cloud using an auto-scaling design
Troubleshoot complex network security issues by identifying root cause and driving continuous platform improvement
Harden security posture for platform devices to reduce vulnerability footprint
Manage firewall service requests
Manage and optimize logging for firewall traffic and rule-based activity
Maintain security baseline standards, plus design documentation and diagrams
Travel up to 10% as needed by business requirements

Requirements

5+ years of Network and Security Engineering experience, with emphasis on security products from Radware, Fortinet, Cisco, and Palo Alto
2+ years with security technologies/products including DDoS, proxy, VPN, firewall orchestration, and/or network access control
2+ years of network security hardening and controls, plus experience using monitoring and logging tools such as SolarWinds, LiveNX, and ELK
2+ years of network defense technology experience across on-prem and cloud environments

Technologies

Palo Alto
Cisco FTD
Fortinet
Radware and Radware Defense Pro hardware
DDOS appliances
Network access control via Cisco ISE (NAC)
Orchestration tools and firewall orchestration
Python, PERL, APIs
VPN
AWS (including native security/firewall concepts)
Mentions of Azure native firewalls
Monitoring/logging tools: SolarWinds, LiveNX, ELK
Related security areas referenced: DDoS, proxy, Cisco ISE/NAC

Benefits

401K matching
Health benefits
Employee stock options
Paid time off
Volunteer time off

Pay Range

USD 103,618 - 172,628 per year
Actual base salary varies based on factors including relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location

Additional Information

Work authorization: This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
Interview communications: LPL will only communicate with applicants directly from an @lplfinancial.com email address and will never conduct interviews online or in a chatroom forum.
No payment: During an interview, LPL will not request any form of payment or information regarding an applicant’s bank or credit card.

Core Competencies

Hands-on engineering experience with Radware, Palo Alto, Fortinet, and Cisco security products, including their management platforms
Critical thinking and ability to work in high-pressure situations due to the unpredictable nature of cyber threats
Strong interpersonal and presentation skills, with ability to communicate and educate others on complex technologies with business acumen
Experience with Radware Defense Pro hardware
Experience with Cisco ISE
Understanding of network security best practices
Knowledge of native firewalls in AWS and Azure

Preferences

Bachelor’s Degree or equivalent work experience
CCNA/CCNP/CISSP is a plus
Experience with scripting and automation tools
Experience with Agile

Location: Fort Mill, SC (hybrid)

Experience level: 5+ years

View full job page →

Aws Cloud Security Engineer Jobs

Senior Software Security Engineer, Infrastructure & Identity

Cloud Security Engineer (DevOps)

Lead Cloud Security Engineer

Senior AI/Cybersecurity Solutions Engineer

AVP, Network Security Engineer

Get Aws Cloud Security Engineer Jobs alerts