AWS Cloud Security Consultant – Security Operations, Infrastructure

This is a fully remote position, open to applicants in United States.

📋 Description

• Deploy and optimize GuardDuty, Security Hub, Detective, Inspector, and CloudTrail within multi-account AWS environments.

• Develop detection mechanisms and integrate AWS telemetry into customer SIEM systems such as Splunk, Elastic/OpenSearch, or Sentinel.

• Create automated response playbooks utilizing EventBridge, Lambda, and Step Functions.

• Oversee incident response and forensic investigations in AWS.

• Design trust boundaries and enhance network security, encompassing VPC segmentation, security groups, NACLs, AWS Network Firewall, Transit Gateway inspection, and PrivateLink.

• Strengthen compute and operating system baselines in accordance with DISA STIGs and CIS benchmarks.

• Lead efforts for patching and vulnerability remediation using Systems Manager and Inspector.

• Establish edge protection through AWS WAF, Shield Advanced, CloudFront, and Route 53.

• Strategize DDoS response plans.

• Draft runbooks and escalation procedures to support 24/7 operations and facilitate handoff to the customer's SOC.

⛳️ Requirements

• AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification.

• Expertise in AWS security services, particularly GuardDuty, Security Hub, Detective, and Inspector.

• Familiarity with NIST, ISO, and CIS security frameworks.

• Experience in STIG or CIS hardening for both Linux and Windows systems.

• Practical experience with at least one enterprise SIEM.

• Background in AWS network security, including VPC design, security groups, and AWS Network Firewall or a third-party next-generation firewall (NGFW).

• Possession of DoD 8140-compliant baseline certification, such as Security+ or CySA+.

• Commitment to complete annual AESP training.

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.

• A minimum of 3 years in security if using equivalent professional experience as a substitute.

• At least 2 years of experience working within the AWS cloud.

• U.S. citizenship status is mandatory.

• Strong written and verbal communication skills.

• Capability to work independently while also valuing teamwork.

• Active Secret, Top Secret, or TS/SCI clearance is preferred but not required to start.

• CySA+, GCIH, GCIA, or GCFA certifications are preferred.

• Experience with Palo Alto Networks VM-Series or Cloud NGFW is preferred.

• Experience in Shield Advanced and WAF rule tuning at scale is preferred.

• Proficiency in Python/Boto3 automation and infrastructure as code is preferred.

• Previous SOC or CSSP experience in a DoD environment is preferred.

🏝️ Benefits

• Continuous learning and development opportunities.

• Competitive salary packages.

• Comprehensive health benefits.

• Flexible work arrangements.

• Additional benefits related to health, retirement, professional development, and more.