AWS Cloud Security Consultant (Application & AI Security)

Virtual Service Operations; United States; Teletrabalho; USD 210 000 - 250 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health benefits

Flexible work arrangements

Ongoing learning and development

Resumo da oferta

VSO Inc. is seeking an AWS Cloud Security Consultant (Application & AI Security) to join our remote team. You will help customers ship secure code and AI workloads, spanning DevSecOps, SAST/DAST/SCA, and container security for EKS, ECS, and Lambda.

You will conduct secure code reviews, threat modeling, and coordinate penetration tests while aligning with NIST/ISO/CIS and OWASP Top 10. DoD 8140-type baseline certs are preferred, with opportunities for Bedrock/SageMaker security work.

Qualificações

• 3+ years in security or equivalent professional experience required.
• AWS Security – Specialty or CISSP/CCSP or GPS-approved equivalent required.
• Proficient with AWS security services (WAF, Inspector, Secrets Manager, Security Hub).
• Familiarity with NIST/ISO/CIS, OWASP Top 10 for cloud apps.
• Hands-on with SAST/DAST/SCA tools (Fortify, SonarQube, Checkmarx, Snyk, Burp Suite).
• Kubernetes security (EKS) and serverless (Lambda).
• Code reading in Python/Java/JS/TS/Go.

Responsabilidades

• Embed security into CI/CD pipelines (SAST/DAST/SCA, secrets, image scanning) across GitLab, GitHub Actions, Jenkins, or CodePipeline.
• Review secure code and perform threat modeling for cloud-native apps, APIs, and microservices.
• Coordinate penetration tests and vulnerability assessments, driving remediation.
• Secure containers and serverless workloads (EKS, ECS, Lambda) with image hardening and least-privilege roles.
• Protect apps with AWS WAF, Bot Control, and API Gateway authorization.
• Guard generative AI workloads with Bedrock Guardrails, data leakage controls, and access policies.
• Map AI workloads to NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS.

Conhecimentos

AWS Security

Security Architecture

Threat Modeling

Penetration Testing

Container Security

SAST/DAST/SCA

Code Review

Python/Java/JS/Go reading

Formação académica

B.S. in Computer Science or related field

3+ years of security experience

Ferramentas

Fortify

SonarQube

Checkmarx

Snyk

Burp Suite

Descrição da oferta de emprego

Description

Are you looking to take the next step in your career as an AWS Cloud Security Consultant (Application & AI Security)? Let's chat and see if we are a good match!

Opportunity

Virtual Service Operations is searching for an AWS Cloud Security Consultant (Application & AI Security) to join our team. In this role, you'll help customers ship secure code and secure AI workloads. The work spans DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI applications on Amazon Bedrock and SageMaker.

Description

Are you looking to take the next step in your career as an AWS Cloud Security Consultant (Application & AI Security)? Let's chat and see if we are a good match!

Opportunity

Virtual Service Operations is searching for an AWS Cloud Security Consultant (Application & AI Security) to join our team. In this role, you'll help customers ship secure code and secure AI workloads. The work spans DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI applications on Amazon Bedrock and SageMaker.

Responsibilities

• Embed security into CI/CD pipelines: SAST, DAST, SCA, secrets scanning, and container image scanning (GitLab, GitHub Actions, Jenkins, or CodePipeline)
• Perform secure code reviews and threat modeling for cloud-native applications, APIs, and microservices
• Conduct or coordinate penetration tests and vulnerability assessments, and drive findings through to remediation
• Secure container and serverless workloads on EKS, ECS, and Lambda: image hardening, runtime protection, and least-privilege execution roles
• Protect applications with AWS WAF, Bot Control, and API Gateway authorization
• Secure generative AI workloads with Bedrock Guardrails, prompt-injection and data-leakage controls, model access policies, and invocation logging
• Map AI workloads to NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS

Required Qualifications

• Demonstrated experience with at least 2 of the 4 authorized service types
• AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
• Proficient with AWS security services, especially AWS WAF, Inspector, Secrets Manager, and Security Hub
• Understanding of security frameworks (NIST, ISO, CIS) and the OWASP Top 10
• Hands-on with SAST/DAST/SCA tools (e.g., Fortify, SonarQube, Checkmarx, Snyk, Burp Suite)
• Container security on Kubernetes (EKS or equivalent)
• Able to read and review code in at least one of Python, Java, JavaScript/TypeScript, or Go
• DoD 8140-compliant baseline certification (e.g., Security+, CISSP)
• Willing to complete annual AESP training

Preferred Qualifications

• OSCP, GWAPT, GPEN, or CSSLP
• Hands-on with Amazon Bedrock, SageMaker, or other generative AI platforms
• AWS Certified AI Practitioner or Machine Learning Engineer – Associate
• DoD DevSecOps experience (Platform One, Iron Bank hardened containers)
• STIG-hardened container images
• No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferred

Requirements

• B.S. in Computer Science, Information Security, or a related field, or equivalent professional experience (3+ years in security)
• 2+ years working with AWS cloud
• This is a remote position
• Please note that this specific position requires U.S. citizenship status

What is Important to Us:

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
• You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
• You seek a community of virtue-centered co-workers and clients.

What we offer you:

As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.

More About VSO

VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers

Salary Description

$210,000K - $250,000K