Cloud Application Security Engineer
Core
Conduct security assessments, remediate vulnerabilities in application code and AWS infrastructure, and support compliance with federal security standards.
Role type
Senior IC cloud application security engineer
Builds
Secure application code and AWS infrastructure
Domain
Cloud security, federal compliance
Required skills
vulnerability assessment, remediation, Python, SQL, VB.NET, AWS CDK, Terraform, CloudFormation, AWS security services, CVE identification, SBOM analysis, SAST, DAST, penetration testing
Preferred skills
CISSP, CEH, GIAC GSEC, AWS Security Specialty, container security, CI/CD pipeline security, DevSecOps, SSDLC, zero-trust principles
Technologies
AWS, CI/CD, Python, SQL, Terraform, ASP.NET
Responsibilities
Conduct security assessments using scanning tools and implement recommended fixes. Assess and remediate KEVs and CVEs affecting custom applications and infrastructure. Analyze SBOM findings to identify vulnerable dependencies and recommend updates or alternatives. Review and remediate vulnerabilities in VB.NET, SQL, and Python code. Analyze and harden AWS CDK infrastructure as code. Work with development teams to strengthen secure coding practices and resolve identified vulnerabilities. Support compliance with federal security standards and frameworks, including NIST, FISMA, and FedRAMP.
Seniority
Mid-Senior, hands-on IC
