AWS CYBERSECURITY ENGINEER - (Must have active TS/SCI clearance)

NorthHill Technology Resources; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

NorthHill Technology Resources is seeking an experienced AWS Cybersecurity Engineer to bolster a highly classified, mission-critical cloud infrastructure. The role requires an active TS/SCI clearance and on-site work in secure facilities, with responsibilities spanning security monitoring, controls, and incident readiness.

You will collaborate across teams to translate complex security requirements into practical protections for restricted environments, contributing to a modernization program

Qualifications

• Active TS/SCI clearance required.
• 5+ years in cybersecurity including 3+ years securing AWS environments.
• Experience implementing security controls and remediating vulnerabilities.
• Experience with formal security assessment and authorization processes.

Responsibilities

• Administer secure artifact repositories, access permissions, and vulnerability scanning workflows.
• Build and tune centralized security monitoring, logging, alerting, and dashboards using AWS-native tools.
• Implement security controls, document remediation, and support security assessments and authorization activities.
• Partner with infrastructure and application teams to resolve findings and improve incident readiness.

Skills

Cybersecurity

AWS security

Security controls

Vulnerability remediation

Security monitoring

NIST 800-53

Authorization processes

Tools

Nexus Repository

OpenSearch

SIEM tooling

Security automation

Job description

One of our premier clients is seeking an experienced AWS Cybersecurity Engineer to join a highly skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. This is a full-time position requiring an active Top Secret/SCI level clearance. Help secure the cloud infrastructure behind high-impact, mission-critical technology. You will work across cloud security operations and compliance engineering, turning complex security requirements into practical protections for highly restricted environments. You will work with experienced technical partners in a collaborative environment where careful engineering and measurable results matter.

The program you will be supporting is a highly classified, mission-critical modernization initiative. Your roles will be to help build next-generation cloud infrastructure and integration platforms that connect fragmented intelligence, operational data, and mission systems through APIs, MCP servers, and cloud-native technologies.

Key Responsibilities

• Administer secure artifact repositories, access permissions, and vulnerability scanning workflows.
• Build and tune centralized security monitoring, logging, alerting, and dashboards using AWS-native and compatible tools.
• Implement security controls, document remediation, and support security assessments and authorization activities.
• Partner with infrastructure and application teams to resolve findings and improve incident readiness.

Qualifications

• 5+ years in cybersecurity, including 3+ years securing AWS environments.
• Hands-on experience implementing security controls, remediating vulnerabilities, and configuring security logging.
• Experience with formal security assessment and authorization processes in regulated or classified environments.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.

Preferred Qualifications

• Nexus Repository, OpenSearch, SIEM tooling, or security automation.
• Experience implementing NIST 800-53, STIG-aligned hardening, and POA&M remediation.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable

Requirements

• Active TS/SCI clearance; must be eligible for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Must reside within commuting distance of one of the following 4 approved secure work locations: Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• Regular on-site work in an approved secure facility and occasional work at authorized customer facilities may be required. This is not a remote position.
• Full-time position, on-site
• Please note that pursuant to a government contract, this specific position requires U.S. citizenship status