AWS Cloud Security Engineer – IAM & CSPM Specialist

Vanguard; Dallas (TX); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid working model

Job summary

Vanguard seeks a Cloud Security Engineer to design, implement, and maintain AWS security controls and IAM policies within our cloud environment. You will strengthen security by monitoring threats, analyzing logs, and coordinating with engineering, DevOps, and apps teams to enforce best practices.

You will contribute to vulnerability management, incident response, and continuous security improvement while operating in a hybrid work model and collaborating across security and product teams.

Qualifications

• Minimum of three years related work experience.
• Undergraduate degree in a related field or the equivalent combination of training and experience.

Responsibilities

• Design, implement, deploy, and maintain cloud security solutions, controls, and security platforms to mitigate security threats, technology vulnerabilities, and operational risks within AWS environments.
• Support and monitor cloud security technologies, ensuring effectiveness through the use of monitoring tools, alerting systems, and security applications.
• Investigate, troubleshoot, resolve, or escalate AWS Cloud Security and AWS IAM incidents, access-related issues, and security events.
• Develop, maintain, and enhance cloud security standards, controls, testing procedures, log analysis processes, and vulnerability assessment methodologies.
• Perform security reviews, risk assessments, and remediation activities to strengthen cloud security and compliance posture.
• Monitor system access logs, audit trails, and security events to identify suspicious activity, anomalous behavior, or unauthorized access attempts that may indicate potential security breaches.
• Collaborate with engineering, infrastructure, DevOps, and application development teams to implement secure cloud solutions and promote security best practices.
• Support identity and access management initiatives, including access controls, role-based access management (RBAC), least-privilege principles, and cloud identity governance.
• Maintain technical documentation, operational procedures, security standards, and knowledge base articles for the team and department.
• Participate in security-focused projects, cloud modernization initiatives, and other duties as assigned.
• Identify opportunities to improve cloud security processes, automation, operational efficiency, and risk reduction efforts.

Skills

AWS security

IAM policies

Cloud security

Python scripting

Terraform

CloudFormation

Security monitoring

Log analysis

Education

Bachelor's degree or equivalent

Tools

Terraform

CloudFormation

Wiz

CI/CD tools

JSON/YAML

Job description

Vanguard seeks a Cloud Security Engineer to design, implement, and maintain AWS security controls and IAM policies within our cloud environment. You will strengthen security by monitoring threats, analyzing logs, and coordinating with engineering, DevOps, and apps teams to enforce best practices.

You will contribute to vulnerability management, incident response, and continuous security improvement while operating in a hybrid work model and collaborating across security and product teams.