FedRAMP Cloud Security Engineer – AWS & AI

AmeriSOURCE Consulting, Inc.; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Full time

Job summary

AmeriSOURCE Consulting, Inc. is seeking a Security Engineer to implement and operate security controls for a cloud-native federal platform hosted on AWS.

The role involves vulnerability scanning, remediation tracking, and supporting Authority to Operate evidence, with collaboration across DevSecOps, application teams, and security leadership. The position emphasizes AI-assisted security tooling, threat detection, incident response, and continuous‑monitoring to strengthen the platform’s security

Qualifications

• 3+ years of professional security engineering experience.
• Experience implementing or operating security controls within cloud environments.
• Hands-on experience with AWS security concepts and services.
• Experience with vulnerability management, security testing, and remediation tracking.
• Working knowledge of NIST SP 800-53 or FedRAMP controls.

Responsibilities

• Implement, configure, and maintain security controls across the AWS cloud environment.
• Perform vulnerability scanning, security testing, and technical security assessments.
• Analyze security findings and coordinate remediation and closure activities.
• Track vulnerabilities, remediation plans, and supporting evidence.
• Assist with Authority to Operate evidence collection and documentation.
• Collaborate with DevSecOps to integrate security into CI/CD pipelines.
• Develop or maintain scripts and automation for security monitoring and reporting.
• Leverage AI-assisted security tools to improve threat detection and triage.

Skills

Security engineering

AWS cloud security

Vulnerability management

Security testing

CI/CD security

Security monitoring

NIST SP 800-53

FedRAMP controls

Scripting

Education

Bachelor’s degree or equivalent in Cybersecurity/CS/IT

Job description

AmeriSOURCE Consulting, Inc. is seeking a Security Engineer to implement and operate security controls for a cloud-native federal platform hosted on AWS.

The role involves vulnerability scanning, remediation tracking, and supporting Authority to Operate evidence, with collaboration across DevSecOps, application teams, and security leadership. The position emphasizes AI-assisted security tooling, threat detection, incident response, and continuous‑monitoring to strengthen the platform’s security