Keywords: cloud security engineer, AWS security, AWS cloud, cloud architecture, AWS IAM, AWS KMS, AWS cloudtrail, AWS security hub, AWS guardduty, AWS networking, NACLs, VPNs, Firewalls, STIGs, CIS benchmarks, NIST 800-53, cloud compliance controls, security hardening, governance, risk, compliance, GRC, infrastructure as code, IaC, terraform, python scripting, automation, SIEM, Wiz, tenable, configuration assessment, threat detection, incident prevention. This engineer will evaluate cloud resources against STIGs, CIS benchmarks, and NIST 800‑53 controls, identify and document security risks, and partner with cross‑functional teams to ensure secure cloud operations.