Remote AWS Cloud Security Engineer (App & AI)

VSO Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salaries

Health benefits

Flexible work arrangements

Job summary

VSO Inc. is seeking an AWS Cloud Security Consultant (Application & AI Security) to help customers ship secure code and AI workloads in a fully remote USA setting.

The role covers DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI apps on Bedrock and SageMaker. Requires 3+ years in security with AWS cloud experience and relevant certifications.

Qualifications

• B.S. in Computer Science, Information Security, or related field (3+ years in security)
• 2+ years working with AWS cloud
• Remote position; U.S. citizenship required
• Hands-on with SAST/DAST/SCA tools (Fortify, SonarQube, Checkmarx, Snyk, Burp Suite)
• Proficient with AWS security services (WAF, Inspector, Secrets Manager, Security Hub)
• AWS certifications: AWS Certified Security – Specialty, CISSP, CCSP or equivalent GPS-approved
• DoD 8140-based baseline certification (e.g., Security+, CISSP) and annual AESP training willingness
• Container security on Kubernetes (EKS)

Responsibilities

• Embed security into CI/CD pipelines: SAST, DAST, SCA, secrets scanning, and container image scanning
• Perform secure code reviews and threat modeling for cloud-native applications, APIs, and microservices
• Coordinate penetration tests and vulnerability assessments; drive remediation
• Secure container and serverless workloads on EKS, ECS, and Lambda with image hardening and least-privilege roles
• Protect applications with AWS WAF, Bot Control, and API Gateway authorization
• Secure generative AI workloads with Bedrock Guardrails, prompt-injection and data-leakage controls
• Map AI workloads to NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS

Education

B.S. in Computer Science, Information Security, or related field

Tools

Fortify

SonarQube

Checkmarx

Snyk

Burp Suite

GitLab

GitHub Actions

Jenkins

CodePipeline

EKS

ECS

Lambda

Bedrock Guardrails

SageMaker

Job description

VSO Inc. is seeking an AWS Cloud Security Consultant (Application & AI Security) to help customers ship secure code and AI workloads in a fully remote USA setting.

The role covers DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI apps on Bedrock and SageMaker. Requires 3+ years in security with AWS cloud experience and relevant certifications.