
AWS Cloud Security Consultant (Application & AI Security)
Cleared IT Positions · USA · Remote
Strong hiring record · median 6 days open
Hiring signal
Actively hiring
Posted 4 days ago · still listed on the employer's own board · How we score
All reasons
In its favour
- Posted 4 days ago
- Still listed on the employer's own board
- Someone has already applied through it
Are you looking to take the next step in your career as an AWS Cloud Security Consultant (Application & AI Security)? Let's chat and see if we are a good match!
Opportunity
Virtual Service Operations is searching for an AWS Cloud Security Consultant (Application & AI Security) to join our team. In this role, you'll help customers ship secure code and secure AI workloads. The work spans DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI applications on Amazon Bedrock and SageMaker.
Responsibilities
- Embed security into CI/CD pipelines: SAST, DAST, SCA, secrets scanning, and container image scanning (GitLab, GitHub Actions, Jenkins, or CodePipeline)
- Perform secure code reviews and threat modeling for cloud-native applications, APIs, and microservices
- Conduct or coordinate penetration tests and vulnerability assessments, and drive findings through to remediation
- Secure container and serverless workloads on EKS, ECS, and Lambda: image hardening, runtime protection, and least-privilege execution roles
- Protect applications with AWS WAF, Bot Control, and API Gateway authorization
- Secure generative AI workloads with Bedrock Guardrails, prompt-injection and data-leakage controls, model access policies, and invocation logging
- Map AI workloads to NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS
Required Qualifications
- Demonstrated experience with at least 2 of the 4 authorized service types
- AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
- Proficient with AWS security services, especially AWS WAF, Inspector, Secrets Manager, and Security Hub
- Understanding of security frameworks (NIST, ISO, CIS) and the OWASP Top 10
- Hands-on with SAST/DAST/SCA tools (e.g., Fortify, SonarQube, Checkmarx, Snyk, Burp Suite)
- Container security on Kubernetes (EKS or equivalent)
- Able to read and review code in at least one of Python, Java, JavaScript/TypeScript, or Go
- DoD 8140-compliant baseline certification (e.g., Security+, CISSP)
- Willing to complete annual AESP training
Preferred Qualifications
- OSCP, GWAPT, GPEN, or CSSLP
- Hands-on with Amazon Bedrock, SageMaker, or other generative AI platforms
- AWS Certified AI Practitioner or Machine Learning Engineer – Associate
- DoD DevSecOps experience (Platform One, Iron Bank hardened containers)
- STIG-hardened container images
- No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferred
- B.S. in Computer Science, Information Security, or a related field, or equivalent professional experience (3+ years in security)
- 2+ years working with AWS cloud
- This is a remote position
- Please note that this specific position requires U.S. citizenship status
What is Important to Us
- You are an excellent communicator in writing and speaking.
- You have the ability to work independently but also value teamwork.
- Your problem-solving skills are excellent.
- You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
- You seek a community of virtue-centered co-workers and clients.
What we offer you
As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.
More About VSO
VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers
Skills
- AWS
- WAF
- Inspector
- Secrets Manager
- Security Hub
- SAST
- DAST
- SCA
- Fortify
- SonarQube
- Checkmarx
- Snyk
- Burp Suite
- Kubernetes
- EKS
- Python
- Java
- JavaScript
- TypeScript
- Go
- Bedrock
- SageMaker
More jobs at Cleared IT Positions
All 72- Cleared AWS Platform / Infrastructure Automation Engineer (Washington, DC)Cleared IT Positions · Washington, DC · USD 175,000–230,000/yr2d ago
- Cleared AWS MDM / Big Data (Data Lake) Engineer (Washington, DC)Cleared IT Positions · Washington, DC · USD 180,000–235,000/yr2d ago
- Cleared AWS Network Engineer (Washington, DC)Cleared IT Positions · Washington, DC · USD 175,000–230,000/yr2d ago
- Cleared AWS Landing Zone Accelerator (LZA) SME (Washington, DC)Cleared IT Positions · Washington, DC · USD 190,000–250,000/yr2d ago
- Cleared AWS Authentication SME (Keycloak) - Part-time (Washington, DC)Cleared IT Positions · Washington, DC · USD 90,000–135,000/yr2d ago
Similar roles
- AWS Cloud Security Consultant (Security Operations & Infrastructure)Cleared IT Positions · USA4d ago
- Lead Information Security Consultant - SaaS Security ConfigurationU.S. Bank · Minneapolis, MN · Gresham, OR · Cincinnati, OH +16d ago
- Security - S&C - HCM - Application Security Functional ConsultantVantage Point Consulting · Charleston3d ago
- Security Analyst III - Security Engineering Consultant – Akamai WAF/BotMan SpecialistTalteam · Van Buren Township, MI3d ago
- Senior Security ConsultantJobgether · UStoday
- OCI Security ConsultantBright Vision Technologies · Sugar Land, TX · USD 100,000–150,000/yr7d ago