Cloud Security Engineer (AWS) - 173963

Piper Companies; Rajasthan; Hybrid; INR 7,940,000 - 8,602,000; Full time

Benefits offered by this job

Health benefits

Dental

Vision

PTO

Holidays

Sick leave

Job summary

Piper Companies in RTP, NC is seeking a Security Engineer (AWS) to secure AWS and Kubernetes environments, support compliance controls, and partner with DevOps and Compliance teams in a hybrid role.

The role emphasizes risk assessment, automation, and documentation, with a strong DevOps background welcome for transition into cloud security and a requirement to work 2 days onsite weekly.

Qualifications

• Experience securing AWS cloud environments and cloud-native services.
• Strong understanding of Kubernetes security and container security.
• Background in Security Engineering, Cloud Security, DevOps, or Infrastructure Engineering.
• Knowledge of AWS security services including IAM, KMS, CloudTrail, GuardDuty, Security Hub, WAF.
• Experience with STIGs, CIS Benchmarks, and NIST 800-53.
• Scripting/automation with Python, Terraform, or CloudFormation.
• Networking concepts: VPCs, security groups, NACLs, VPNs, firewalls.
• Strong communication, problem-solving and stakeholder management.
• Able to work independently in an Agile environment.

Responsibilities

• Ensure AWS cloud environments are securely configured and aligned with best practices.
• Assess and validate compliance with STIGs, CIS benchmarks, and NIST 800-53.
• Identify security vulnerabilities and drive remediation with tickets and stakeholders.
• Collaborate with DevOps, Infrastructure, and Compliance teams for secure cloud operations.
• Review and secure Kubernetes deployments and containerized workloads.
• Automate security processes using scripting and infrastructure-as-code tools.
• Conduct security reviews, risk assessments, and vulnerability analyses.
• Communicate findings and remediation plans to stakeholders.
• Maintain security configuration documentation and procedures.
• Stay current with cloud security threats and best practices.

Skills

AWS security

Kubernetes security

DevOps background

Agile environment

Communication skills

Independent worker

Tools

Python

Terraform

CloudFormation

Job description

Piper Companies is seeking a Security Engineer (AWS) to join a growing cybersecurity team supporting secure cloud infrastructure and compliance initiatives. This opportunity is based in the RTP, NC area and follows a hybrid schedule requiring 2 days onsite per week. The Cloud Security Engineer will be responsible for securing AWS and Kubernetes environments, validating compliance requirements, identifying security gaps, and partnering with cross-functional teams to strengthen cloud security posture. This role is also open to candidates with a strong DevOps background who are interested in transitioning into cloud security.

Responsibilities of the Security Engineer (AWS)

• Ensure AWS cloud environments are securely configured and aligned with industry best practices.
• Assess and validate compliance with STIGs, CIS benchmarks, and NIST 800-53 controls.
• Identify security vulnerabilities and configuration gaps and drive remediation efforts through ticket management and stakeholder engagement.
• Collaborate with DevOps, Infrastructure, and Compliance teams to support secure cloud operations.
• Review and secure Kubernetes deployments and containerized workloads.
• Automate security processes using scripting and infrastructure-as-code tools.
• Conduct security reviews, risk assessments, and vulnerability analyses.
• Facilitate meetings with stakeholders to communicate findings, recommendations, and remediation plans.
• Maintain documentation related to security configurations, standards, and procedures.
• Stay current with emerging cloud security threats, technologies, and best practices.

Qualifications for the Security Engineer (AWS)

• Experience securing AWS cloud environments and cloud-native services.
• Strong understanding of Kubernetes security, container security, and secure deployment practices.
• Background in Security Engineering, Cloud Security, DevOps, or Infrastructure Engineering.
• Knowledge of AWS security services including IAM, KMS, CloudTrail, GuardDuty, Security Hub, and WAF.
• Experience with compliance frameworks including STIGs, CIS Benchmarks, and NIST 800-53.
• Hands-on experience with scripting and automation tools such as Python, Terraform, or CloudFormation.
• Strong understanding of networking concepts including VPCs, security groups, NACLs, VPNs, and firewalls.
• Excellent communication, problem-solving, and stakeholder management skills.
• Ability to work independently in an Agile environment.
• Authorized to work in the US for any employer

Preferred Qualifications for the Security Engineer (AWS)

• Experience with Wiz, Tenable, or similar cloud security platforms.
• Hands-on experience with SIEM tools, alerting, and security monitoring.
• AWS Certified Security Specialty, CISSP, or similar security certifications.
• Prior experience in regulated or compliance-driven environments.
• DevOps engineers with strong AWS, Kubernetes, and automation experience looking to move into a dedicated security role are encouraged to apply.

Technical Environment

• AWS (IAM, KMS, CloudTrail, GuardDuty, Security Hub, WAF)
• Kubernetes
• Terraform and CloudFormation
• Python
• SIEM Platforms
• Wiz, Tenable, and Vulnerability Management Tools
• NIST 800-53
• STIGs and CIS Benchmarks
• Cloud Networking and Security

Compensation for the Security Engineer (AWS)

• Compensation: $60-$65/hr
• Long-term contract opportunity with potential for extension
• Full Health, Dental, Vision, PTO, Holidays, Sick Leave as Required by Law

Keywords: Security Engineer, AWS Security, Cloud Security, Kubernetes Security, DevSecOps, DevOps, NIST 800-53, STIG, CIS Benchmarks, Terraform, CloudFormation, IAM, GuardDuty, Security Hub, WAF, Vulnerability Management, Wiz, Tenable, SIEM, Cloud Infrastructure, Automation, RTP, Raleigh, North Carolina.

This position opened for applications on August 21, 2026, and will remain open for at least 30 days from the posting date.