AWS Cloud Security Consultant (Application & AI Security)
Virtual Service Operations, Inc.16 hours ago
Remote, United StatesMid Level
Responsibilities
- Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, secrets scanning, and container image scanning.
- Perform secure code reviews and threat modeling for cloud-native applications, APIs, and microservices.
- Conduct or coordinate penetration tests and vulnerability assessments and drive findings through remediation.
- Secure container and serverless workloads on EKS, ECS, and Lambda through image hardening, runtime protection, and least-privilege execution roles.
- Protect applications using AWS WAF, Bot Control, and API Gateway authorization.
- Secure generative AI workloads using Bedrock Guardrails, prompt-injection and data-leakage controls, model access policies, and invocation logging.
- Map AI workloads to NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS.
Requirements
- Bachelor of Science in Computer Science, Information Security, or a related field, or equivalent professional experience.
- At least 3 years of experience in security and at least 2 years working with AWS cloud.
- Demonstrated experience with at least two of the four authorized service types.
- AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification, plus a DoD 8140-compliant baseline certification.
- Proficiency with AWS security services, especially AWS WAF, Inspector, Secrets Manager, and Security Hub.
- Understanding of NIST, ISO, CIS, and OWASP Top 10 security frameworks.
- Hands-on experience with SAST, DAST, and SCA tools such as Fortify, SonarQube, Checkmarx, Snyk, or Burp Suite.
- Container security experience with Kubernetes, including EKS or an equivalent platform.
- Ability to read and review code in Python, Java, JavaScript/TypeScript, or Go.
- Willingness to complete annual AESP training.
- Preferred qualifications include OSCP, GWAPT, GPEN, CSSLP, AWS Certified AI Practitioner, or Machine Learning Engineer – Associate certifications; experience with Bedrock, SageMaker, DoD DevSecOps, Platform One, Iron Bank, and STIG-hardened container images; and an active Secret, Top Secret, or TS/SCI clearance.
- No security clearance is required to start, but U.S. citizenship is required.
Benefits
- Remote position with flexible work arrangements.
- Health benefits, retirement benefits, and other benefits for eligible employees.
- Ongoing learning and professional development opportunities.
- Regular performance appraisals and career advancement opportunities.
Tech Stack
Categories
About Virtual Service Operations, Inc.
Virtual Service Operations (VSO) is a privately held IT services firm founded in 2017 and headquartered in Manassas, Virginia. It delivers managed IT and hybrid-cloud operations, cloud migration, end-user services, network consulting, and IT financial management, anchored by its FogLifter platform. VSO serves large commercial enterprises and U.S. federal and defense customers, including projects in classified DoD environments, providing cybersecurity support and TBM/IT financial management advisory.