AWS Cloud Security Engineer (Top Secret)
TLDR
Evaluate and integrate enterprise and AWS-native security tools to strengthen unified security operations for a Federal client.
-
Assess enterprise security tools such as:
-
SIEM platforms
-
IDS/IPS solutions
-
Vulnerability management systems
-
Evaluate AWS-native security services including:
-
AWS GuardDuty
-
AWS Macie
-
AWS Inspector
-
Conduct configuration reviews against:
-
CIS Benchmarks
-
AWS Well-Architected Framework
-
Review logging and monitoring configurations to ensure adequate coverage and visibility
-
Support or perform vulnerability assessments and penetration testing to validate tool effectiveness
-
Analyze tool integration and data flow between systems
-
Identify gaps, redundancies, and opportunities for optimization
-
Provide recommendations to improve tooling effectiveness and coverage
- 7+ years hands-on experience with security tools and AWS security services
-
Experience with AWS security services and cloud security tooling
-
Experience performing tool assessments, audits, or implementations
-
AWS Certified Cloud Practitioner
-
CompTIA Security+ (baseline, if needed)
-
AWS Certified Security – Specialty
-
Splunk Certified Architect / Power User
-
Microsoft SC-200 or equivalent
-
OSCP (Offensive Security Certified Professional)
-
CEH (Certified Ethical Hacker)
Core Certifications:
Tool/Platform & Cloud:
Pen Testing / Validation (Preferred):
Clearance Requirement: Active TS/SCI with SCI Polygraph (or eligible)
Benefits
Equity Compensation
401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
Health Insurance
Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
voluntary insurance benefits
Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
Paid Time Off
11 Paid Holidays Annually
UltraViolet Cyber builds a cybersecurity platform that integrates security operations for enterprises, eliminating risks associated with traditional red and blue team approaches. Targeting Fortune 500 and government clients, they deliver a combination of technology-driven solutions and expert management to enhance real-time security across diverse organizational landscapes.