Remote Cloud App Security Engineer (GovCloud/AWS)

Infojini Inc; St. Louis (MO); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Infojini Inc. seeks a Cloud Application Software Security Engineer to assess and remediate vulnerabilities across custom apps and IaC in AWS GovCloud. You will code primarily in VB.NET, SQL, and Python while hardening cloud configurations with CDK, Terraform, or CloudFormation.

Join a role that bridges secure development, cloud security engineering, and compliance, driving fixes, documenting controls, and ensuring alignment with federal standards such as NIST and FedRAMP.

Qualifications

• Bachelor's degree or equivalent experience in CS or related field.
• 3–5+ years in application security or secure development.
• Experience with vulnerability remediation methodologies.
• Experience with SBOM, SAST/DAST, and pentesting.

Responsibilities

• Conduct security assessments using scanning tools and implement remediations.
• Evaluate and remediate KEVs and CVEs in apps and IaC.
• Support SA&A processes, including documentation and evidence collection.
• Analyze SBOM findings to identify vulnerable dependencies and recommend updates.
• Review and remediate security vulnerabilities in VB.NET, SQL, and Python code.
• Perform security analysis and hardening of CDK infrastructure as code.
• Collaborate with development teams to implement secure coding practices.
• Maintain security documentation and track remediation through completion.
• Ensure compliance with federal security standards (NIST, FISMA, FedRAMP) within AWS GovCloud.
• Participate in security scanning automation and continuous monitoring.

Skills

Analytical thinking

Problem-solving

Excellent communication

Security mindset

Education

Bachelor's degree in CS/SE/Cybersecurity

Tools

AWS CDK

Terraform

CloudFormation

VB.NET

Job description

Infojini Inc. seeks a Cloud Application Software Security Engineer to assess and remediate vulnerabilities across custom apps and IaC in AWS GovCloud. You will code primarily in VB.NET, SQL, and Python while hardening cloud configurations with CDK, Terraform, or CloudFormation.

Join a role that bridges secure development, cloud security engineering, and compliance, driving fixes, documenting controls, and ensuring alignment with federal standards such as NIST and FedRAMP.