Senior Cloud Security Specialist

StaffXpert LLC; Washington (District of Columbia); Hybrid; USD 140,000 - 170,000; Full time

Job summary

STAFFXPERT LLC in Washington, DC is seeking a Senior Cloud Security Specialist with deep AWS security expertise. The role focuses on designing and strengthening cloud security controls, supporting secure deployments, and guiding engineering teams on security best practices.

You will conduct assessments of AWS environments, review IaC for security compliance, and advance security automation and governance across the cloud stack.

Qualifications

• 8+ years in information security, cloud security, or cybersecurity.
• 7+ years securing AWS environments.
• Strong AWS security services, architecture, and security engineering knowledge.
• Experience with IAM, network security, and security operations.
• Familiarity with DevSecOps, IaC, and security automation.
• Knowledge of NIST standards and related compliance requirements.
• Zero Trust concepts and vulnerability management experience.
• Scripting and security automation proficiency.

Responsibilities

• Conduct security assessments and reviews of AWS cloud environments.
• Evaluate IaC implementations for adherence to security standards.
• Review cloud platforms for compliance with security policies and controls.
• Assess AWS environments against security architecture and governance frameworks.
• Identify, document, and remediate security risks and misconfigurations.
• Implement and enhance AWS security controls, monitoring, and hardening practices.
• Develop and maintain security standards, configuration guidelines, dashboards, and playbooks.
• Partner with engineering teams to ensure secure cloud solutions.
• Deliver security recommendations, risk findings, and improvement plans.
• Support automation initiatives for security assessments and compliance monitoring.
• Conduct security awareness and technical training sessions for internal teams.
• Recommend and evaluate cloud security tools and process improvements.

Skills

AWS security

Cloud security

Security engineering

IAM

DevSecOps

IaC security

Security automation

Zero Trust

Vulnerability management

Data protection

Scripting

Troubleshooting

Stakeholder communication

Independent work

Job description

Senior Cloud Security Specialist

Location: Washington, DC (Hybrid)

Job Summary

STAFFXPERT LLC is seeking a Senior Cloud Security Specialist on behalf of our client in Washington, DC. This role is ideal for a seasoned cloud security professional with strong expertise in AWS security, security engineering, compliance, and cloud governance. The successful candidate will help design, assess, and strengthen cloud security controls, support secure infrastructure deployments, and provide guidance to engineering teams on security best practices.

Key Responsibilities

• Conduct security assessments and reviews of AWS cloud environments.
• Evaluate Infrastructure-as-Code (IaC) implementations for adherence to security standards.
• Review cloud platforms for compliance with security policies, controls, and industry best practices.
• Assess AWS environments against security architecture and governance frameworks.
• Identify, document, and help remediate security risks, vulnerabilities, and misconfigurations.
• Implement and enhance AWS security controls, monitoring, and hardening practices.
• Develop and maintain security standards, configuration guidelines, dashboards, and operational playbooks.
• Partner with engineering teams to ensure secure cloud solution implementation.
• Deliver security recommendations, risk findings, and improvement plans to stakeholders.
• Support automation initiatives for security assessments and compliance monitoring.
• Conduct security awareness and technical training sessions for internal teams.
• Recommend and evaluate cloud security tools and process improvements.

Required Qualifications

• 8+ years of experience in information security, cloud security, or cybersecurity.
• 7+ years of hands-on experience securing AWS environments.
• Strong expertise in AWS security services, cloud security architecture, and security engineering.
• Experience with Identity and Access Management (IAM), network security, and security operations.
• Knowledge of cybersecurity frameworks and security controls, including NIST standards and related compliance requirements.
• Experience with DevSecOps practices, Infrastructure-as-Code (IaC), and security automation.
• Strong understanding of Zero Trust principles, vulnerability management, and data protection strategies.
• Proficiency in scripting and security automation.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong communication skills with the ability to collaborate effectively with technical and business stakeholders.
• Ability to work independently in a fast-paced environment.

Preferred Qualifications

• AWS Certified Security Specialty.
• AWS Certified Solutions Architect (Professional or Associate).
• Experience supporting highly regulated or enterprise-scale cloud environments.
• Experience developing cloud security standards, governance frameworks, and security best practices.