AWS Cloud Security Engineer – IAM & Incident Response Lead

Peraton; Northern (KY); Hybrid; USD 86,000 - 138,000; Full time

Job summary

Peraton is seeking an experienced AWS Security Engineer to secure cloud infrastructure, lead vulnerability remediation and integrate security into CI/CD pipelines. You will work with Cloud Engineering, DevOps and app teams to maintain a compliant, resilient AWS environment.

The role requires hands-on AWS services experience (IAM, KMS, GuardDuty, CloudTrail) and Terraform IaC, with a focus on risk assessments, incident response and automation.

Qualifications

• 8+ years with a BS/BA; 6+ years with an MS/MA or 12 years with a HS diploma/equivalent.
• 6 years in cloud security or cybersecurity.
• Proficient in Python and Bash scripting.
• Hands-on with ECS, EKS, EC2, Lambda.
• Proficient in Git and CI/CD pipelines.
• Deep knowledge of AWS security services: IAM, KMS, GuardDuty, Security Hub, CloudTrail, Config Rules.

Responsibilities

• Lead vulnerability scanning and remediation for cloud resources.
• Manage IAM roles/policies, encryption, KMS, and secrets.
• Provision AWS infrastructure with Terraform (IaC).
• Write CloudWatch metrics/alarms scripts.
• Implement alerting and remediation automation.
• Assist in incident response and root cause analysis.
• Develop security architecture docs and runbooks.
• Run AWS security posture assessments with automated tools.
• Embed security in CI/CD pipelines and IaC.
• Maintain compliance with NIST, FISMA, FedRAMP.
• On-call rotations for 24/7 production support.

Skills

Python

Bash

CI/CD pipelines

Cloud security

Threat modeling

US Citizenship

Public Trust clearance

Git

communication

Education

BS/BA

MS/MA

HS Diploma/equivalent

Tools

Terraform

ECS

EKS

EC2

Lambda

IAM

KMS

GuardDuty

Security Hub

CloudTrail

Config Rules

Job description

Peraton is seeking an experienced AWS Security Engineer to secure cloud infrastructure, lead vulnerability remediation and integrate security into CI/CD pipelines. You will work with Cloud Engineering, DevOps and app teams to maintain a compliant, resilient AWS environment.

The role requires hands-on AWS services experience (IAM, KMS, GuardDuty, CloudTrail) and Terraform IaC, with a focus on risk assessments, incident response and automation.