AWS Cloud Security Consultant – App & AI Security (Remote)

VSO Inc.; United States; Remote; USD 210,000 - 250,000; Full time

Benefits offered by this job

Health benefits

Flexible work arrangements

Ongoing learning and development

Job summary

VSO Inc. is seeking an AWS Cloud Security Consultant (Application & AI Security) to join our remote team. You will help customers ship secure code and AI workloads, spanning DevSecOps, SAST/DAST/SCA, and container security for EKS, ECS, and Lambda.

You will conduct secure code reviews, threat modeling, and coordinate penetration tests while aligning with NIST/ISO/CIS and OWASP Top 10. DoD 8140-type baseline certs are preferred, with opportunities for Bedrock/SageMaker security work.

Qualifications

• 3+ years in security or equivalent professional experience required.
• AWS Security – Specialty or CISSP/CCSP or GPS-approved equivalent required.
• Proficient with AWS security services (WAF, Inspector, Secrets Manager, Security Hub).
• Familiarity with NIST/ISO/CIS, OWASP Top 10 for cloud apps.
• Hands-on with SAST/DAST/SCA tools (Fortify, SonarQube, Checkmarx, Snyk, Burp Suite).
• Kubernetes security (EKS) and serverless (Lambda).
• Code reading in Python/Java/JS/TS/Go.

Responsibilities

• Embed security into CI/CD pipelines (SAST/DAST/SCA, secrets, image scanning) across GitLab, GitHub Actions, Jenkins, or CodePipeline.
• Review secure code and perform threat modeling for cloud-native apps, APIs, and microservices.
• Coordinate penetration tests and vulnerability assessments, driving remediation.
• Secure containers and serverless workloads (EKS, ECS, Lambda) with image hardening and least-privilege roles.
• Protect apps with AWS WAF, Bot Control, and API Gateway authorization.
• Guard generative AI workloads with Bedrock Guardrails, data leakage controls, and access policies.
• Map AI workloads to NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS.

Skills

AWS Security

Security Architecture

Threat Modeling

Penetration Testing

Container Security

SAST/DAST/SCA

Code Review

Python/Java/JS/Go reading

Education

B.S. in Computer Science or related field

3+ years of security experience

Tools

Fortify

SonarQube

Checkmarx

Snyk

Burp Suite

Job description

VSO Inc. is seeking an AWS Cloud Security Consultant (Application & AI Security) to join our remote team. You will help customers ship secure code and AI workloads, spanning DevSecOps, SAST/DAST/SCA, and container security for EKS, ECS, and Lambda.

You will conduct secure code reviews, threat modeling, and coordinate penetration tests while aligning with NIST/ISO/CIS and OWASP Top 10. DoD 8140-type baseline certs are preferred, with opportunities for Bedrock/SageMaker security work.