AWS Security Engineer (DevSecOps)

Role: AWS Security Engineer (DevSecOps)

Experience: 7+ years

Location: Remote - anywhere in US and need to support during EST/CST hours

Rate: $70/hr (maximum)

Key Responsibilities

• Design and implement secure AWS architectures following the AWS Well-Architected Framework (Security Pillar).
• Manage and govern IAM, SSO, KMS, CloudTrail, Config, and Security Hub.
• Configure and maintain AWS native security services:
• GuardDuty, Macie, Inspector, Detective, WAF, Shield, and Firewall Manager.
• Build automated security policies and compliance frameworks (CIS, NIST, ISO 27001, PCI DSS).
• Implement encryption at rest and in transit, enforce TLS, and key rotation via KMS.
• Develop and run incident detection, alerting, and response workflows using EventBridge, Lambda, and SNS.
• Integrate AWS Security Hub and GuardDuty findings into SIEM platforms (Splunk, Elastic, etc.).

Systems & Infrastructure Engineering

• Manage and secure Linux/Windows systems running on EC2, EKS, and ECS.
• Build, automate, and maintain infrastructure with Terraform, CloudFormation, or AWS CDK.
• Configure VPCs, subnets, NAT gateways, Transit Gateway, and PrivateLink for secure network segmentation.
• Implement system patching, configuration management, and OS-level hardening (CIS benchmarks).
• Design and manage backups, disaster recovery, and multi-region high availability setups.
• Automate system monitoring, logging, and remediation with CloudWatch, SSM, and Config Rules

DevSecOps

• Integrate security scanning and compliance checks into CI/CD pipelines (GitHub Actions, Jenkins, CodePipeline).
• Automate vulnerability management (ECR image scanning, Inspector, Trivy, or Twistlock).
• Develop infrastructure automation for identity provisioning, logging, and access control.
• Create reusable Terraform modules and templates for AWS accounts and VPCs.
• Implement infrastructure drift detection and self-healing automation.

Monitoring, Audit & Compliance

• Implement centralized log aggregation with CloudWatch Logs, OpenSearch, or SIEM tools.
• Monitor security posture continuously via Security Hub, Config, and GuardDuty dashboards.
• Conduct regular vulnerability scans, penetration testing coordination, and security posture reviews.
• Manage audit readiness and evidence collection for compliance frameworks (SOC2, ISO27001, HIPAA).
• Develop runbooks and playbooks for incident response and operational processes.

Preferred Qualifications

• AWS Certified Security - Specialty (strongly preferred)
• Experience with multi-account AWS Organizations, Control Tower, and Service Control Policies (SCPs)
• Knowledge of container security (EKS, ECS, Bottlerocket, Karpenter)
• Experience with SIEM/SOAR integrations and automated incident response

Exposure to Zero Trust and Network Segmentation design principles