Senior AWS Cyber Engineer

VulnU; Bedford, Northern (MA, KY); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Senior AWS Cyber Engineer to support the USAF Cloud One architecture in a large multi-cloud environment. The onsite role near Hanscom AFB, Boston, MA focuses on security, compliance, and cost effectiveness for critical missions.

You design, deploy, and maintain RMF/ATO artifacts for AWS SIPRNet, act as SME for system design and ATO efforts, and operate scanners like ACAS/Nessus, AWS Inspector, and Security Hub. Mentoring and customer briefings are part of the role.

Qualifications

• Bachelor's degree with 8+ years of relevant experience, or Master's with 6+ years.
• Active DoD Secret security clearance is required.
• DoD 8570/8140 IAT Level II baseline certification and AWS Security – Specialty.
• Hands-on with AWS CLI, Ansible, Nessus, and implementing STIGs.

Responsibilities

• Design, deploy, configure, operate, and maintain RMF/ATO artifacts for AWS SIPRNet.
• Serve as SME for system design, builds, and ATO efforts on cybersecurity requirements.
• Operate and maintain ACAS/Nessus, AWS Inspector, AWS Security Hub tools.
• Monitor CloudTrail, AWS Config, GuardDuty, and other cloud-native services.
• Document mitigations, generate POA&Ms, and ensure patch compliance.
• Provide mentorship to junior staff and participate in customer briefings.

Skills

AWS

Cloud security

Security compliance

Ansible

AWS CLI

Education

Bachelor's degree in Computer Science or related field

Tools

ACAS/Nessus

AWS Inspector

AWS Security Hub

CloudTrail

AWS Config

GuardDuty

Tenable Nessus

STIGs

Ansible

Job description

Leidos was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for a Senior AWS Cyber Engineer supporting Amazon Web Services (AWS) cloud environments. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.Location:This position will be full-time onsite and may require travel to support customer or corporate meetings near Hanscom AFB (Boston, MA).Primary Responsibilities Include:Design, deploy, configure, operate, and maintain authorizations and accreditation of the C1 Architecture for AWS SIPRNet environments.Serve as Subject Matter Expert (SME) for all IT stakeholders involved with system design, system builds, and Authority to Operate (ATO) efforts on cybersecurity requirements and tooling.Operate, configure and maintain various compliance tools/services including ACAS/Nessus scanners; AWS Inspector; AWS Security Hub to detect misconfigurations and threats; and other Cloud Native Services.Monitor and query various logging and event monitoring tools/services including CloudTrail; AWS Config; GuardDuty; and other Cloud Native Services.Document technical mitigation details, compile raw scan exports, generate vulnerability reports, create and maintain system Plan of Action and Milestones (POA&M).Continuously monitor system resources through automated scanning and implement automated reporting feeds to support cybersecurity authorizations.Ensure compliance with SCCA, Cloud Computing SRG, and other STIG/SRG requirements.Create RMF-required authorization-related documentation and artifacts and support ATO sustainment activities.Verify patch compliance using the approved technical solutions and conduct remediation activities.Provide and execute a plan for enterprise vulnerability and compliance scanning.Implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.Participate in regular briefings with the customer on cybersecurity status, including preparing briefing materialsPrepare detailed technical documentation to support development and operational processesCollaborate with team members and provide mentorship to junior staff, fostering a learning environmentMinimum Qualifications:Bachelors and 8 years of prior relevant experience or Masters with 6 years of prior relevant experience or equivalent experience.Must have 6 years of experience with cloud hosted systems and/or applications.U.S. citizenship is required due to contract requirements.Must possess an active DoD Secret security clearance.Certifications: DoD 8570/8140 IAT Level II baseline certification (e.g., Security CE, CySA , or equivalent)AWS Certified Security – SpecialtyACAS Certified – Supervisor/OperatorHands-on experience with AWS CLI, Ansible Playbooks, Tenable Nessus, and implementing and remediating DISA Security Technical Implementation Guides (STIGs).sPreferred Qualifications:Experience with USAF Cloud One or Platform 1Experience with automation/tools like EvalSTIG, STIG Manager, Ansible etc.Experience with Zero Trust ArchitectureLinux (RHEL) and/or Microsoft Windows Server administration certificationsCertifications: CISSP or equivalent (IAT-3)If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.Original Posting:October 6, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.Pay Range:Pay Range $107,900.00 - $195,050.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.