AWS Cloud Security Engineer | IAM, IaC & Incident Response

Peraton; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Peraton is seeking an AWS Security Engineer to secure cloud infrastructure with hands-on work on AWS security services, risk assessments, incident response, and continuous monitoring. You will partner with Cloud Engineering, DevOps, and Applications teams to embed security into CI/CD pipelines and infrastructure as code.

The role requires strong scripting, Terraform expertise, and ability to implement guardrails, threat modeling, and audits aligned with NIST, FISMA, and FedRAMP.

Qualifications

• 8+ years experience with BS/BA or 12+ years with HS/equivalent
• 6 years in cloud security or cybersecurity
• Proficient in Python and Bash
• Hands-on with ECS, EKS, EC2, Lambda
• Proficient in Git and CI/CD pipelines
• Strong Terraform proficiency with modules, variables and workspaces
• Knowledge of AWS security services (IAM, KMS, GuardDuty, Security Hub, CloudTrail, Config Rules)
• IAM policy and permissions audits to enforce least privilege
• Ability to read and interpret access logs, cloud configurations, and IAM policies
• Strong written and verbal communication for technical and non-technical stakeholders
• Excellent analytical and problem-solving skills
• Must be a US Citizen and able to obtain Public Trust clearance
• Preferred certifications in cloud (AWS Cloud Practitioner, Security Specialty) or security compliance/audit

Responsibilities

• Lead vulnerability scanning and remediation for cloud resources
• Understand IAM Roles/Policies, Identity Federation, Encryption, KMS, secrets management
• Provision AWS infrastructure using Terraform IaC
• Write CloudWatch scripts for custom metrics and alarms
• Implement alerting and remediation automation based on probe output
• Assist in incident response, investigation and root cause analysis of cloud security events
• Develop and maintain security architecture docs, runbooks and procedures
• Run AWS security posture assessments with automated tools
• Experience with AWS cloud security monitoring and detection tooling
• Contribute to DevOps best practices and embed security in CI/CD and IaC
• Implement and improve AWS security controls, guardrails and baseline configurations
• Continuously evaluate AWS environments for cost-effective security improvements
• Conduct threat modeling, vulnerability analysis and remediation coordination
• Support audits by gathering evidence and validating configurations
• Maintain cloud compliance with NIST, FISMA and FedRAMP
• Assist in risk assessments and security control testing
• Support change control and documentation ownership
• Evaluate merging cloud security tools and propose enhancements
• Maintain security standards compliance across environments
• Participate in on-call rotations for 24/7 production support

Skills

Python

Bash

CI/CD

Git

Cloud security

IAM

Incident response

Vulnerability analysis

Communication

Analytical thinking

Education

Bachelor's degree in related field

Master's degree in related field

Tools

Terraform

CloudWatch

Job description

Peraton is seeking an AWS Security Engineer to secure cloud infrastructure with hands-on work on AWS security services, risk assessments, incident response, and continuous monitoring. You will partner with Cloud Engineering, DevOps, and Applications teams to embed security into CI/CD pipelines and infrastructure as code.

The role requires strong scripting, Terraform expertise, and ability to implement guardrails, threat modeling, and audits aligned with NIST, FISMA, and FedRAMP.