AWS Cloud Security Engineer - IAM & CSPM Expert

Vanguard; Charlotte (NC); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Vanguard is seeking a Cloud Security Engineer to design and operate cloud security controls across AWS, focusing on IAM, vulnerability management, and secure DevOps practices. You will partner with cross-functional teams to strengthen our cloud security posture and governance.

The role emphasizes security monitoring, incident investigation, and collaboration with engineering, infrastructure, and application teams in a hybrid work environment.

Qualifications

• Minimum of three years related work experience.
• Undergraduate degree in a related field or the equivalent combination of training and experience.

Responsibilities

• Design, implement, deploy, and maintain cloud security solutions, controls, and security platforms to mitigate security threats, technology vulnerabilities, and operational risks within AWS environments.
• Support and monitor cloud security technologies, ensuring effectiveness through monitoring tools, alerting systems, and security applications.
• Investigate, troubleshoot, resolve, or elevate AWS Cloud Security and AWS IAM incidents, access-related issues, and security events.
• Develop, maintain, and enhance cloud security standards, controls, testing procedures, log analysis processes, and vulnerability assessment methodologies.
• Perform security reviews, risk assessments, and remediation activities to strengthen cloud security and compliance posture.
• Monitor system access logs, audit trails, and security events to identify suspicious activity, anomalous behavior, or unauthorized access attempts that may indicate potential security breaches.
• Collaborate with engineering, infrastructure, DevOps, and application development teams to implement secure cloud solutions and promote security best practices.
• Support identity and access management initiatives, including access controls, RBAC, least-privilege principles, and cloud identity governance.

Skills

AWS security

IAM policies

Python

JSON

YAML

Rego

CloudFormation

Terraform

security monitoring

log analysis

Education

Bachelor's degree

Tools

CloudFormation

Terraform

Wiz

Job description

Vanguard is seeking a Cloud Security Engineer to design and operate cloud security controls across AWS, focusing on IAM, vulnerability management, and secure DevOps practices. You will partner with cross-functional teams to strengthen our cloud security posture and governance.

The role emphasizes security monitoring, incident investigation, and collaboration with engineering, infrastructure, and application teams in a hybrid work environment.