About this role
Job Description
ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. All positions are onsite, unless otherwise stated.
Description
Are you looking to take the next step in your career as an AWS Cloud Security Consultant (Application & AI Security)? Let's chat and see if we are a good match!
Opportunity
Virtual Service Operations is searching for an AWS Cloud Security Consultant (Application & AI Security) to join our team. In this role, you'll help customers ship secure code and secure AI workloads. The work spans DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI applications on Amazon Bedrock and SageMaker.
Responsibilities
- Embed security into CI/CD pipelines: SAST, DAST, SCA, secrets scanning, and container image scanning (GitLab, GitHub Actions, Jenkins, or CodePipeline)
- Perform secure code reviews and threat modeling for cloud-native applications, APIs, and microservices
- Conduct or coordinate penetration tests and vulnerability assessments, and drive findings through to remediation
- Secure container and serverless workloads on EKS, ECS, and Lambda: image hardening, runtime protection, and least-privilege execution roles
- Protect applications with AWS WAF, Bot Control, and API Gateway authorization
- Secure generative AI workloads with Bedrock Guardrails, prompt-injection and data-leakage controls, model access policies, and invocation logging
- Map AI workloads to NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS
Required Experience
Required Qualifications
- Demonstrated experience with at least 2 of the 4 authorized service types
- AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
- Proficient with AWS security services, especially AWS WAF, Inspector, Secrets Manager, and Security Hub
- Understanding of security frameworks (NIST, ISO, CIS) and the OWASP Top 10
- Hands-on with SAST/DAST/SCA tools (e.g., Fortify, SonarQube, Checkmarx, Snyk, Burp Suite)
- Container security on Kubernetes (EKS or equivalent)
- Able to read and review code in at least one of Python, Java, JavaScript/TypeScript, or Go
- DoD 8140-compliant baseline certification (e.g., Security+, CISSP)
- Willing to complete annual AESP training
Requirements
- B.S. in Computer Science, Information Security, or a related field, or equivalent professional experience (3+ years in security)
- 2+ years working with AWS cloud
- This is a remote position
- Please note that this specific position requires U.S. citizenship status
What is Important to Us
- You are an excellent communicator in writing and speaking.
- You have the ability to work independently but also value teamwork.
- Your problem-solving skills are excellent.
- You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
- You seek a community of virtue-centered co-workers and clients.
Salary Description
$210,000K - $250,000K
Preferred Experience
Preferred Qualifications
- OSCP, GWAPT, GPEN, or CSSLP
- Hands-on with Amazon Bedrock, SageMaker, or other generative AI platforms
- AWS Certified AI Practitioner or Machine Learning Engineer – Associate
- DoD DevSecOps experience (Platform One, Iron Bank hardened containers)
- STIG-hardened container images
- No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferred
Certificates/Security Clearances/Other
Required
- AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
- DoD 8140-compliant baseline certification (e.g., Security+, CISSP)