Aws Security

Aws Security Engineer Jobs

4 jobs found

Today

AWS Cloud Security Engineer

Quevera LLC Herndon, VA

Herndon, VA

Today

Full time Ai Engineer Ai Security Amazon Web Services

Apply Now

Job Description

Quevera LLC is hiring an AWS Cloud Security Engineer (active TS/SCI) to help secure and manage security posture across a complex, multi-vendor AWS environment.

Responsibilities

Design and implement intelligent model-routing logic using ML-based classification to route requests to appropriate LLMs based on conversational context, task complexity, and performance needs.
Build and maintain orchestration layers using AWS Bedrock, LangChain, or custom frameworks to support multi-model workflows.
Train, evaluate, and iteratively improve classification models using evaluation frameworks and feedback loops.
Architect conversation-context analysis, retrieval, and embedding strategies for interpreting user intent across multi-turn interactions.
Develop prompt-engineering standards and context-window management techniques to support intent classification and routing.
Architect enterprise-scale GenAI solutions with high availability, performance optimization, and cost management.
Apply GenAI platform practices including observability, model evaluation, guardrails, responsible AI controls, and versioning.
Design and maintain data extraction and transformation pipelines to support model training, evaluation, and enterprise application integration.
Coordinate with customer stakeholders and technical counterparts to gather requirements, validate solutions, and participate in Agile/Scrum ceremonies.
Collaborate with the Engagement Manager to track progress and risks, and produce technical documentation, architecture diagrams, and handoff artifacts.

Requirements

Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor environment with distributed AWS accounts under an externally managed organization.
Assess current security posture and drive vendor alignment with organizational standards.
Support government security processes and production of compliance artifacts, including IATTs and ATOs.
Integrate distributed logging to a centralized reviewer (C5ISR).

Desired Skills

Active TS/SCI clearance required.
Ability and willingness to work from AWS SCIFs as required.
Local candidates required for Herndon, VA, Denver, CO, or Seattle, WA.

Technologies

AWS
AWS Bedrock
LangChain
ML-based classification
LLMs
Infrastructure as Code (IaC)
IATTs
ATOs
C5ISR

Work Location

AWS IAD21 – Herndon, Virginia
Customer Site – Springfield, Virginia
Denver, Colorado
Seattle, Washington
Work split: approximately 80% low-side / 20% high-side.
Remote work acceptable with attendance at AWS SCIFs as required.
Role supports work across Herndon, VA; Springfield, VA; Denver, CO; and Seattle, WA.

Benefits

100% employer-paid medical coverage (optional plan)
Competitive options for Medical, Dental and Vision insurance
Employer-paid short-term and long-term disability coverage
Employer-paid life insurance
$5,000 annually for education, training, certifications, and professional development
Career advancement through the structured iQTouch Program
Up to 6% 401(k) match
Additional 4% profit-sharing contribution, at company discretion

Additional Information

Quevera recognized as a Top Workplace in the Washington, DC/Baltimore region for 2025, fifth consecutive year.
Equal opportunity/affirmative action employer; all qualified applicants receive consideration without regard to protected characteristics.

View full job page →

Today

Staff Application Security Engineer

Samsara Dallas, TX 🇺🇸 Remote

Dallas, TX

Today

$165k - $295k/yr Full time Senior Agent Ai Security

Apply Now

Job Description

Samsara offers a flexible, employee-led remote model with opportunities to grow in a hyper-growth environment. In this role, you will shape application security and vulnerability management programs across cloud, internal systems, and firmware/IoT, helping reduce risk while enabling engineering teams to move faster with clearer guidance. This Staff Application Security Engineering position is remote for candidates residing in the US and based in Dallas, TX.

Base salary is USD 165,200 - 295,000 per yearly. Samsara also provides performance-based bonus/variable pay and equity (for eligible roles), plus above-market total compensation.

Responsibilities

Own the ongoing strategy, operation, and continuous improvement of vulnerability management and other core application security programs, defining what the processes should be.
Drive down mean time to remediate (MTTR) across the vulnerability backlog as SLAs tighten.
Build and champion automation and tooling to scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
Set technical and architectural direction by translating leadership priorities into an execution plan for the team.
Drive remediation by establishing trust with engineering teams and providing clear, actionable guidance, partnering with technical program management on reporting.
Mentor engineers on secure design and remediation practices, and serve as a technical voice when priorities are unclear.
Communicate risk and remediation tradeoffs to engineering leadership in practical terms, without owning the relationship end to end.
Participate in security incident investigations involving high-profile vulnerabilities and assess potential impact on Samsara infrastructure.
Be regularly on call to support critical vulnerability response.
Champion and embed Samsara cultural principles: Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, and Win as a Team.

Requirements

10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
Proficiency in Go, Python, and JavaScript.
Proven ability to independently set technical and architectural direction for a security program and drive remediation across multiple surfaces without direct authority over fixing teams.
Significant experience with modern vulnerability management tooling (e.g., Wiz, Semgrep) and deep familiarity with CVSS and EPSS.
Strong AWS cloud services background.
Deep understanding of SAST, DAST, and SCA.
Hands-on use of AI/LLM tooling in security workflows (triage, detection logic, and remediation drafting), along with credibility explaining how AI changes the threat landscape and available tooling.

Technologies

Go, Python, JavaScript
Wiz, Semgrep
CVSS, EPSS
AWS
Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA)
AI/LLM tooling, AI copilots/agents
C/C++, Tines, AWS Lambda, CI/CD pipelines
FedRAMP

Benefits

Flexible, employee-led remote model
Professional development stipend
Comprehensive health and parental leave plans
Base salary, performance-based bonus/variable pay, and equity (for eligible roles)
Above-market total compensation for eligible roles

Additional Ways to Be Successful

Experience with C/C++ related to firmware and embedded systems
Background at a cloud-native, AI-forward company building agentic or AI-driven products
Experience with security automation platforms (e.g., Tines) and AWS Lambda
Experience integrating vulnerability management into CI/CD with a “shift-left” mindset
Experience spanning SaaS, firmware, and corporate IT security programs
Experience managing vulnerabilities within a FedRAMP-certified environment
Experience building or wiring up AI copilots/agents for security workflows (e.g., automated triage and remediation drafting)

Flexible Working

Samsara embraces a flexible working model that caters to the needs of its teams.
Offices are open for in-person work, and remote work is supported where it aligns with operational requirements.
For certain roles, being near an office or within a specific geographic area may be important for collaboration and alignment with service regions.
Offers are contingent on an individual’s ability to secure and maintain the legal right to work at the company and in the specified work location, if applicable.

Belonging at Samsara

Samsara welcomes everyone regardless of background and provides consideration for employment without regard to protected characteristics.
Samsara depends on the unique approaches of team members to solve complex problems.

Accommodations

Samsara is committed to ensuring equal opportunity for qualified persons with disabilities. If you require reasonable accommodations during the recruiting process, email accessibleinterviewing@samsara.com or click here.

Our Commitment to Authenticity

Samsara uses Tofu, a fraud detection tool, to validate the authenticity of applications and protect against identity fraud.

Fraudulent Employment Offers

Samsara is aware of scams involving fake job interviews and offers.
Samsara does not charge fees to applicants at any stage of the hiring process.
Official communication about your application will only come from emails ending in @samsara.com, @us-greenhouse-mail.io, or @mail3.guide.co.

View full job page →

Today

Application Security Engineer, AWS Security

Amazon.com Services LLC Seattle, WA

Seattle, WA

Today

$159k - $202k/yr Full time Application Security Aws Security Cloud Platforms

Apply Now

Job Description

Amazon.com Services LLC is hiring an Application Security Engineer for AWS Security in Seattle, WA. In this onsite role, you will help validate the security of AWS services, applications, and websites by analyzing application security, identifying issues, and driving fixes. You will also build security automation and react quickly when new threat scenarios emerge.

What you’ll do

Conduct application security reviews across services, applications, and websites
Perform penetration testing to discover security weaknesses
Support projects and research as needed
Deliver security training and outreach to internal development teams
Create and maintain security guidance documentation
Build security tools and automation to improve security outcomes
Deliver security metrics and work on continuous improvements
Assist with recruiting activities and administrative work as needed

Required qualifications

3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language
2+ years of scripting, programming, and security code review in a common programming language (non-internship)
2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
Bachelor’s degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
Knowledge of industry-based security vulnerabilities and remediation techniques

Technologies

AWS
Python, Ruby, Go, Swift, Java, .Net, C++
HTTP, DNS, TCP/IP

Preferred qualifications

2+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
2+ years of scripting, programming, or security code review in a common language such as Python, Java, or C++
Experience performing security activities across phases of the SDLC, including security design review, threat modeling, secure code review, and security testing

Compensation and location

Location: Seattle, WA (onsite)
Salary: USD 159,300 - 202,400 per year

Benefits

Sign-on payments
Restricted stock units (RSUs)
Health insurance including medical, dental, vision, prescription, Basic Life & AD&D, plus options for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy Reimbursement coverage
401(k) matching
Paid time off
Parental leave

View full job page →

Today

Principal Cloud Security Engineer

Rocket Lab Corporation Long Beach, CA

Long Beach, CA

Today

$152k - $165k/yr Full time Aws Security Azure Security Cloud

Apply Now

Job Description

Secure and harden Rocket Lab’s cloud footprint across vendor platforms, code pipelines, and automation in an onsite role in Long Beach, CA.

Responsibilities

Design, implement, and maintain security controls for hybrid cloud environments spanning IaaS, PaaS, SaaS, and FaaS solutions
Design and develop custom automation to support cyber team objectives
Provide security support for internal and external design reviews related to security
Perform security assessments and risk analyses to identify vulnerabilities and define mitigations for automated infrastructure, including public cloud, CI/CD pipelines, and agentic systems
Partner with Infrastructure Operations to implement and manage IAM solutions that control access to cloud resources and applications
Create documentation, plans, and proofs of concept for cybersecurity platform improvements
Configure and monitor cloud security tools and services
Collaborate with development teams to apply security best practices across the SDLC, DevOps, and MLOps processes
Maintain systems to stay current on emerging threats, vulnerabilities, and DevSecOps/MLOps best practices, and recommend proactive actions to strengthen security posture
Advise and support internal teams on incident response, compliance, and security awareness training
Participate in ongoing security audits, assessments, and compliance reviews to support adherence to regulatory requirements and industry standards

Requirements

12+ years experience in scripting languages, including Bash, PowerShell, or Python
12+ years experience with configuration management and/or Infrastructure as Code tools such as Puppet, Ansible, or Terraform
Bachelor’s degree (or equivalent years of work experience), with 16+ years total work experience
Proven experience in cloud security architecture, design, and implementation across AWS, Azure, and Google Cloud
Hands-on experience with cloud security tools and services, including AWS Security Hub, Azure Security Center, and Google Cloud Security Command Center
Experience working under US Government compliance regimes such as CMMC, NIST, and DISA STIG, plus ITIL/Change Review systems
Experience with vulnerability management systems such as Tenable and Bringa
Experience with CLI scanning tools including Trivy and OpenSCAP
Extensive experience with git-driven version control platforms such as GitHub, GitLab, and Bitbucket
Strong understanding of networking concepts, encryption techniques, and secure communication protocols
Experience with databases including PostgreSQL and SQLite, plus data formats such as Parquet and Arrow
Proficiency in analytics systems including PowerBI and Jupyter, and vendor-agnostic assessment engines such as Cloud Custodian and Panther
U.S. citizenship required, due to program requirements

Technologies

Bash, PowerShell, Python
Puppet, Ansible, Terraform
AWS, Azure, Google Cloud
AWS Security Hub, Azure Security Center, Google Cloud Security Command Center
CMMC, NIST, DISA STIG, ITIL
Tenable, Bringa
Trivy, OpenSCAP
GitHub, GitLab, Bitbucket
PostgreSQL, SQLite
Parquet, Arrow
PowerBI, Jupyter
Cloud Custodian, Panther
IaaS, PaaS, SaaS, FaaS
CI/CD, SDLC, DevOps, MLOps, DevSecOps, IAM

These qualifications would be nice to have

Advanced degree in computer science, information technology, cybersecurity, or equivalent career experience
Involvement with community cybersecurity organizations
Experience with AWS GovCloud / Azure GCC High
Experience with CI/CD pipeline security
Experience with Tier 2 cloud vendors
Experience with hybrid cloud engineering
Experience with SAST and DAST testing
Experience with secrets management including vaults and HSMs
Experience with cloud incident response / forensics
Experience with log aggregators such as Graylog, ELK, or Splunk

Important information

US offices only: Rocket Lab employees must be a U.S. citizen, lawful U.S. permanent resident (current Green Card holder), or lawfully admitted as a refugee or granted asylum, or be eligible to obtain required authorizations from the U.S. Department of State and/or U.S. Department of Commerce as applicable
Reasonable accommodation: Applicants requiring accommodation for the application/interview process should contact Giulia Johnson at g.biow@rocketlabusa.com
Response timeline: A response to requests may take up to two business days
New Zealand offices only: Background checks will be undertaken prior to any employment offers, including nationality checks, based on eligibility to access equipment and data regulated by the United States’ International Traffic in Arms Regulations
Ineligibility note for New Zealand offices: Applicants may be ineligible if they do not hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union, or a country part of NATO, or if they hold ineligible dual citizenship or nationality

Location: Long Beach, CA (onsite)

Compensation: USD 152,300 - 165,000 per year

Experience: 12+ years

Education: Bachelor’s degree (or equivalent years of work experience)

View full job page →

Aws Security Engineer Jobs

AWS Cloud Security Engineer

Staff Application Security Engineer

Application Security Engineer, AWS Security

Principal Cloud Security Engineer

Get Aws Security Engineer Jobs alerts