AWS Cloud Security Consultant (Security Operations & Infrastructure)

VSO Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

VSO Inc. is seeking an AWS Cloud Security Consultant (Security Operations & Infrastructure) for a fully remote role in the USA.

You will protect workloads, design secure AWS environments, and lead incident response across GuardDuty, Security Hub, Inspector, and related services. The ideal candidate has 3+ years in cloud security, AWS certification, DoD 8140 baseline credentials, and hands-on SIEM experience.

Qualifications

• AWS Certified Security – Specialty or equivalent GPS-approved certification.
• Proficient with AWS security services (GuardDuty, Security Hub, Detective, Inspector).
• Understanding of security frameworks (NIST, ISO, CIS) and CIS hardening.
• Hands-on with at least one enterprise SIEM.
• AWS network security experience: VPC design, security groups, Network Firewall or NGFW.
• DoD 8140–compliant baseline certification (e.g., Security+, CySA+).
• Willing to complete annual AESP training.

Responsibilities

• Deploy and tune GuardDuty, Security Hub, Detective, Inspector, and CloudTrail across multi-account environments.
• Engineer detections and feed AWS telemetry into SIEMs (Splunk, Elastic/OpenSearch, or Sentinel).
• Build automated response playbooks with EventBridge, Lambda, and Step Functions; lead incident response.
• Design trust boundaries and network security: VPC segmentation, SGs, NACLs, AWS Network Firewall, Transit Gateway.
• Harden compute/OS baselines to DISA STIGs and CIS benchmarks; drive patching/remediation with Systems Manager.
• Implement edge protection with AWS WAF/Shield, CloudFront, Route53; plan DDoS response.
• Write runbooks and escalation paths for 24/7 operations and SOC handoff.

Education

B.S. in Computer Science or related field

Tools

Python/Boto3 automation

Job description

AWS Cloud Security Consultant (Security Operations & Infrastructure)
Fully Remote • USA • AWS

Description

Are you looking to take the next step in your career as an AWS Cloud Security Consultant? Let's chat and see if we are a good match!

Virtual Service Operations is searching for an AWS Cloud Security Consultant to join our team. In this role, you'll protect customer workloads and catch threats before they do damage. The work spans detection engineering, incident response, network and host hardening, and edge protection across AWS environments.

Responsibilities:

• Deploy and tune GuardDuty, Security Hub, Detective, Inspector, and CloudTrail across multi-account environments
• Engineer detections and feed AWS telemetry into the customer's SIEM (Splunk, Elastic/OpenSearch, or Sentinel)
• Build automated response playbooks with EventBridge, Lambda, and Step Functions, and lead incident response and forensics in AWS
• Design trust boundaries and network security: VPC segmentation, security groups, NACLs, AWS Network Firewall, Transit Gateway inspection, and PrivateLink
• Harden compute and OS baselines to DISA STIGs and CIS benchmarks, and drive patching and vulnerability remediation with Systems Manager and Inspector
• Implement edge protection with AWS WAF, Shield Advanced, CloudFront, and Route 53, including DDoS response planning
• Write runbooks and escalation paths that support 24/7 operations and handoff to the customer's SOC

Required Qualifications:

• AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
• Proficient with AWS security services, especially GuardDuty, Security Hub, Detective, and Inspector
• Understanding of security frameworks (NIST, ISO, CIS), including STIG or CIS hardening on Linux and Windows
• Hands-on with at least one enterprise SIEM
• AWS network security experience: VPC design, security groups, and AWS Network Firewall or a third-party NGFW
• DoD 8140-compliant baseline certification (e.g., Security+, CySA+)
• Willing to complete annual AESP training

Preferred Qualifications:

• CySA+, GCIH, GCIA, or GCFA
• Prior SOC or CSSP experience in a DoD environment
• Palo Alto Networks VM-Series or Cloud NGFW experience
• Shield Advanced and WAF rule tuning at scale
• Python/Boto3 automation and infrastructure as code
• No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferred

Requirements:

• B.S. in Computer Science, Information Security, or a related field, or equivalent professional experience (3+ years in security)
• 2+ years working with AWS cloud
• This is a remote position
• Please note that this specific position requires U.S. citizenship status

What is Important to Us:

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
• You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
• You seek a community of virtue-centered co-workers and clients.

What we offer you:

As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.

More About VSO

VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers