AWS Cloud Security Consultant – Application, AI Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Integrate security measures within CI/CD pipelines utilizing SAST, DAST, SCA, secrets scanning, and container image scanning.

• Execute secure code reviews and perform threat modeling for cloud-native applications, APIs, and microservices.

• Facilitate or organize penetration tests and vulnerability assessments.

• Propel security issues through to resolution.

• Safeguard container and serverless workloads on EKS, ECS, and Lambda via image hardening, runtime protection, and least-privilege execution roles.

• Shield applications with AWS WAF, Bot Control, and API Gateway authorization mechanisms.

• Secure generative AI workloads using Bedrock Guardrails, prompt-injection and data-leakage controls, model access policies, and invocation logging.

• Align AI workloads with NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS frameworks.

• Assist customers in delivering secure code and safeguarding AI workloads.

• Collaborate with clients and VSO teams as part of a remote consulting initiative.

⛳️ Requirements

• Proven experience with a minimum of 2 of the 4 authorized service types.

• AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved credential.

• Expertise in AWS security services, particularly AWS WAF, Inspector, Secrets Manager, and Security Hub.

• Familiarity with NIST, ISO, CIS, and OWASP Top 10 security frameworks.

• Practical experience with SAST/DAST/SCA tools such as Fortify, SonarQube, Checkmarx, Snyk, or Burp Suite.

• Container security experience on Kubernetes (EKS or similar).

• Capability to read and review code in Python, Java, JavaScript/TypeScript, or Go.

• DoD 8140-compliant baseline certification, such as Security+ or CISSP.

• Willingness to undergo annual AESP training.

• Bachelor’s degree in Computer Science, Information Security, or a related discipline, or equivalent professional experience.

• Over 3 years of experience in security if utilizing equivalent professional experience.

• More than 2 years of experience working with AWS cloud.

• U.S. citizenship is required.

• OSCP, GWAPT, GPEN, or CSSLP certifications are preferred.

• Hands-on experience with Amazon Bedrock, SageMaker, or other generative AI platforms is preferred.

• AWS Certified AI Practitioner or Machine Learning Engineer – Associate is preferred.

• DoD DevSecOps experience is preferred.

• Experience with STIG-hardened container images is preferred.

• Active Secret, Top Secret, or TS/SCI clearance is preferred.

🏝️ Benefits

• Continuous learning and development opportunities.

• Competitive salary packages.

• Comprehensive health benefits.

• Flexible work arrangements.

• Health, retirement, and professional development benefits for eligible employees.

• Regular performance evaluations.

• Opportunities for career advancement.

• A team and workplace culture centered on virtues.