Remote AWS Cloud Security Engineer | SIEM & IR

VSO Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

VSO Inc. is seeking an AWS Cloud Security Consultant (Security Operations & Infrastructure) for a fully remote role in the USA.

You will protect workloads, design secure AWS environments, and lead incident response across GuardDuty, Security Hub, Inspector, and related services. The ideal candidate has 3+ years in cloud security, AWS certification, DoD 8140 baseline credentials, and hands-on SIEM experience.

Qualifications

• AWS Certified Security – Specialty or equivalent GPS-approved certification.
• Proficient with AWS security services (GuardDuty, Security Hub, Detective, Inspector).
• Understanding of security frameworks (NIST, ISO, CIS) and CIS hardening.
• Hands-on with at least one enterprise SIEM.
• AWS network security experience: VPC design, security groups, Network Firewall or NGFW.
• DoD 8140–compliant baseline certification (e.g., Security+, CySA+).
• Willing to complete annual AESP training.

Responsibilities

• Deploy and tune GuardDuty, Security Hub, Detective, Inspector, and CloudTrail across multi-account environments.
• Engineer detections and feed AWS telemetry into SIEMs (Splunk, Elastic/OpenSearch, or Sentinel).
• Build automated response playbooks with EventBridge, Lambda, and Step Functions; lead incident response.
• Design trust boundaries and network security: VPC segmentation, SGs, NACLs, AWS Network Firewall, Transit Gateway.
• Harden compute/OS baselines to DISA STIGs and CIS benchmarks; drive patching/remediation with Systems Manager.
• Implement edge protection with AWS WAF/Shield, CloudFront, Route53; plan DDoS response.
• Write runbooks and escalation paths for 24/7 operations and SOC handoff.

Education

B.S. in Computer Science or related field

Tools

Python/Boto3 automation

Job description

VSO Inc. is seeking an AWS Cloud Security Consultant (Security Operations & Infrastructure) for a fully remote role in the USA.

You will protect workloads, design secure AWS environments, and lead incident response across GuardDuty, Security Hub, Inspector, and related services. The ideal candidate has 3+ years in cloud security, AWS certification, DoD 8140 baseline credentials, and hands-on SIEM experience.