Aws Cloud Security

Aws Cloud Security Cybersecurity Jobs

2 jobs found

Today

Senior AI/Cybersecurity Solutions Engineer

RCG Suitland, MD

Suitland, MD

Today

$130k - $140k/yr Full time Senior Agent Ai Security

Apply Now

Job Description

Senior AI/Cybersecurity Solutions Engineer role supporting a federal Security, Architecture, and Engineering (SAE) team in Suitland, MD.

Responsibilities

Design and implement Amazon Bedrock agent action groups, including OpenAPI schemas and Python Lambda execution layers
Build Retrieval-Augmented Generation (RAG) pipelines using Bedrock Knowledge Bases with sources including NIST 800-53, CIS Benchmarks, organizational SSPs, and threat intelligence
Engineer prompts, guardrails, and input validation to improve accuracy, security, and resistance to prompt-injection attacks
Evaluate and evolve foundation-model strategies as platform requirements and AI capabilities mature
Develop AI-assisted workflows for security assessment, remediation, hardening, alert triage, and compliance operations
Automate NIST 800-53 control assessments and security evidence collection capabilities
Implement remediation and hardening automation across AWS services including S3, EC2, IAM, CloudTrail, ECS, and EKS
Integrate live security data from AWS Security Hub, GuardDuty, Inspector, and Config to enable environment-aware analysis and AI-assisted decisions
Support BOD 26-04 SLA logic, CISA KEV correlation, risk enrichment, and remediation SLA tracking
Support security telemetry aggregation and SIEM integrations including Microsoft Sentinel and AWS Security Lake
Support ECR vulnerability scanning, EKS runtime monitoring, and container configuration hardening
Develop and analyze SBOMs using formats such as SPDX and CycloneDX
Correlate vulnerabilities with the CISA Known Exploited Vulnerabilities (KEV) catalog for risk-based prioritization
Perform software supply-chain security checks for dependencies, provenance, and threats including typosquatting and unsigned container images
Maintain GitLab CI/CD pipelines for linting, testing, security scanning, builds, and deployments
Implement secure OIDC-based AWS authentication
Develop and manage Infrastructure as Code using CloudFormation and/or Terraform with least-privilege IAM
Support deployment and rollout verification across application and Kubernetes/EKS environments
Maintain strong Git practices including branching, merge requests, and clean version-control history
Manage technical work via Jira (tickets, epics, sub-tasks, workflows, status, and handoffs)
Maintain documentation in Confluence including architecture guides, runbooks, decision records, and onboarding materials
Produce technical design documentation, evidence packages, and audit-ready artifacts for federal assessments
Maintain traceability between requirements, engineering work, code, deployments, and security evidence
Own assigned technical workstreams and collaborate with cybersecurity and engineering teams

Requirements

Bachelor’s degree in computer science, Cybersecurity, or a related technical discipline
6+ years of cloud security engineering experience
2+ years of production experience with generative AI/LLM technologies
4+ years experience working with AWS security services
3+ years supporting federal compliance frameworks such as NIST, FedRAMP, and FISMA
2+ years active Jira and Confluence experience in an Agile or technical delivery environment
Expert-level Python development experience including Python 3.11+, boto3, type hints, and robust error handling
Advanced experience with Amazon Bedrock including agents, action groups, Knowledge Bases, guardrails, prompt engineering, and RAG
Expert knowledge of AWS security technologies including Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, and OIDC
Advanced container security experience with ECR, ECS/EKS, image scanning, runtime monitoring, and hardening
Expert knowledge of NIST SP 800-53 Rev. 5 including control families, assessment procedures, and evidence requirements
Advanced experience with CI/CD and Infrastructure as Code including GitLab CI and CloudFormation and/or Terraform
Advanced Git/version-control experience
Demonstrated experience managing technical work in Jira and maintaining team documentation in Confluence

Technologies

Amazon Bedrock, OpenAPI, Python, AWS Lambda
Retrieval-Augmented Generation (RAG), Bedrock Knowledge Bases, Amazon Bedrock agents, guardrails
NIST 800-53, NIST SP 800-53 Rev. 5, CIS Benchmarks, System Security Plans (SSPs)
prompt-injection attacks
AWS security services: AWS Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, OIDC
AWS services: S3, EC2, ECS, EKS, Kubernetes
Microsoft Sentinel, AWS Security Lake
ECR, SBOMs (SPDX, CycloneDX), CISA Known Exploited Vulnerabilities (KEV)
GitLab CI/CD pipelines, GitLab CI, Jira, Confluence, Git, CI/CD
Infrastructure as Code: CloudFormation, Terraform
BOD 26-04, BOD 26-04
FedRAMP, FISMA

Benefits

Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA)
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (Vacation, Sick & Public Holidays)
Family Leave (Maternity, Paternity)
Short Term & Long Term Disability
Training & Development
Wellness Resources
401(k) with company match

Preferred Qualifications

Master’s degree in a related technical discipline
3+ years of experience building production AI agents
Experience supporting ATO and continuous monitoring activities
Experience administering or configuring Jira boards and Confluence spaces
Experience supporting federal IT security programs
Familiarity with CISA Binding Operational Directives, including BOD 22-01 and BOD 26-04
Experience with AWS Security Lake, OCSF, OSCAL machine-readable compliance, or Microsoft Sentinel integration
Experience with AI red teaming or adversarial testing of LLM applications
Familiarity with software supply-chain technologies and frameworks such as SLSA, Sigstore, and in-toto
Certifications such as AWS Certified Security – Specialty, CISSP, CISM, CKS, or AWS machine learning certification are preferred

Work Environment

Full-time, 100% on-site position in Suitland, MD supporting a federal government cybersecurity and enterprise IT environment
Technical environment includes AWS, Amazon Bedrock, EKS, GitLab, GitLab CI, AWS CodePipeline, Jira, Confluence, Python, VS Code, Jupyter Notebook, and related cloud and cybersecurity technologies

Additional Notes

Must be a U.S. Citizen or Lawful Permanent Resident and eligible to obtain and maintain a Public Trust
Employment contingent upon successful completion of applicable government background investigation and customer onboarding requirements

View full job page →

Today

AVP, Network Security Engineer

LPL Financial Corp Fort Mill, SC

Fort Mill, SC

Today

$104k - $173k/yr Full time Aws Cloud Security Cybersecurity Tools Ddos Defense

Apply Now

Job Description

LPL Financial Corp is seeking an AVP Tech Network Engineer, Security to design, engineer, and operate network security capabilities that help deliver scalable, resilient, and secure networking solutions. This hybrid role based in Fort Mill, SC combines hands-on security engineering with automation and cloud-focused implementation, supporting critical client-facing infrastructure while you contribute to continuous improvement.

Why this role

Collaborative, fast-paced culture focused on integrity, continuous improvement, and client success
Hands-on security ownership spanning firewall, DDoS, NAC/ISE, VPN remote access, and AWS cloud security
Automation and orchestration impact using scripting languages and APIs to improve security operations
Strong benefits including 401(k) matching, health benefits, employee stock options, and paid time off

Responsibilities

Design and engineer network security solutions using Palo Alto, Cisco FTD, and Fortinet firewalls
Build automation using Python or PERL, leveraging APIs for data exchange
Engineer and operate the VPN and Cisco ISE/NAC remote access environment
Implement firewall solutions in AWS using an auto-scaling design
Troubleshoot complex network security issues, identify root cause, and drive ongoing platform improvements
Harden platform devices to reduce the vulnerability footprint
Manage firewall service requests
Manage and optimize logging for firewall traffic and rule-based activity
Maintain security baseline standards, along with design documentation and diagrams
Travel up to 10% based on business needs

Requirements

5+ years of Network and Security Engineering experience, with emphasis on security products from Radware, Fortinet, Cisco, and Palo Alto
2+ years with security technologies/products such as DDoS, proxy, VPN, firewall orchestration, and/or network access control
2+ years of network security hardening and controls, plus hands-on experience using network monitoring and logging tools (e.g., SolarWinds, LiveNX, ELK)
2+ years of network defense technology experience both on-prem and in cloud environments

Core competencies

Hands-on engineering experience with Radware, Palo Alto, Fortinet, and Cisco security products, including management platforms
Ability to think critically and perform in high-pressure situations where cyber threats evolve unpredictably
Strong interpersonal and presentation skills in both oral and written communication, with the ability to explain complex technologies with business acumen
Experience with Radware Defense Pro hardware and Cisco ISE
Understanding of network security best practices and knowledge of native firewalls in AWS and Azure

Helpful qualifications

Bachelor’s Degree or equivalent work experience
CCNA, CCNP, or CISSP is a plus
Experience with scripting and automation tools
Experience with Agile

Compensation

Pay range: USD 103,618 - 172,628 per year. Actual base salary varies based on relevant skills, prior experience, education, base pay of internal peers, demonstrated performance, and geographic location.

Additional information

This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
LPL will only communicate with applicants from an @lplfinancial.com email address and will never conduct an interview online or in a chatroom forum.
During an interview, LPL will not request any form of payment or information regarding an applicant’s bank or credit card.

View full job page →

Aws Cloud Security Cybersecurity Jobs

Senior AI/Cybersecurity Solutions Engineer

AVP, Network Security Engineer

Get Aws Cloud Security Cybersecurity Jobs alerts