AWS Security Engineer – Cloud Compliance Pro

Apex Systems; Raleigh (NC); Hybrid; USD 104,000 - 177,000; Part time

Benefits offered by this job

Medical, dental, vision

401K with company match

HSA

Job summary

Everforth Apex is seeking a Security Engineer to secure our AWS cloud environment and ensure compliance with STIGs, CIS benchmarks, and NIST 800-53 controls. The role includes identifying security gaps, creating remediation tickets, and engaging with stakeholders to address findings and vulnerabilities.

You will collaborate with DevOps, IT, and Compliance to secure cloud operations, automate security processes with Python, CloudFormation, and Terraform, and maintain comprehensive security

Qualifications

• Experience securing AWS environments per best practices.
• Knowledge of STIGs, CIS benchmarks, and NIST 800-53.
• Hands-on with SIEM tools and alerting.
• Proficient in scripting and automation in Python.

Responsibilities

• Ensure AWS environment is securely configured according to best practices.
• Validate compliance with STIGs and CIS benchmarks.
• Monitor alignment with NIST 800-53 controls.
• Create and manage tickets to remediate identified security gaps.
• Schedule and discuss findings with stakeholders.
• Collaborate with DevOps, IT, and Compliance for secure cloud operations.
• Automate security processes using cloud-native tools.
• Maintain documentation of security policies and configurations.
• Stay up to date with AWS security trends.

Skills

AWS security

Kubernetes

SIEM

Security best practices

VPC design

Python scripting

CloudFormation/Terraform

Stakeholder engagement

NIST 800-53

Cloud security

Tools

CloudFormation

Terraform

Python

Job description

Everforth Apex is seeking a Security Engineer to secure our AWS cloud environment and ensure compliance with STIGs, CIS benchmarks, and NIST 800-53 controls. The role includes identifying security gaps, creating remediation tickets, and engaging with stakeholders to address findings and vulnerabilities.

You will collaborate with DevOps, IT, and Compliance to secure cloud operations, automate security processes with Python, CloudFormation, and Terraform, and maintain comprehensive security