aws-config jobs in San Diego

As an AWS Cloud Security Engineer, you will conduct hands-on security assessments and engineering for enterprise AWS environments, reviewing Organizations, accounts, landing zones, IAM, networking, and security services to identify gaps and strengthen cloud posture. You'll develop Terraform and Infrastructure as Code, establish secure configuration baselines, create security policies and guardrails, and translate technical requirements into scalable, repeatable solutions.…See more The role requires 3+ years of AWS cloud engineering, cloud security, or DevSecOps experience, with demonstrated expertise in AWS native services (IAM, VPC, CloudTrail, GuardDuty, Security Hub, KMS), Infrastructure as Code, and scripting/automation. You'll collaborate with cloud architects, security teams, application owners, and client leadership to deliver implementation-ready documentation and security automation.

This Security Engineer role owns continuous cloud security posture management (CSPM) and vulnerability management across AWS accounts, detecting misconfigurations and driving remediation at scale. The person will build reusable Terraform modules, Service Control Policies, and policy-as-code guardrails to make secure-by-default infrastructure; design least-privilege IAM; govern secrets and encryption; and build cloud-native detections (CloudTrail, GuardDuty, Config, Security Hub) with automated remediation.…See more They'll map technical controls to compliance frameworks (CMMC, NIST SP 800-171, FedRAMP), support the SOC team investigating cloud incidents, and feed findings back into new guardrails. The role requires 3+ years of hands-on cloud security or DevSecOps experience, strong AWS expertise, Terraform and policy-as-code proficiency, and the ability to obtain a U.S. security clearance.

As an AWS Cloud Security Engineer, you'll conduct hands-on security assessments and engineering for enterprise AWS environments, reviewing Organizations, accounts, landing zones, IAM, networking, and security services to identify gaps and strengthen cloud posture. You'll work with AWS-native services (IAM, CloudTrail, GuardDuty, Security Hub, KMS, etc.), develop Terraform Infrastructure as Code, establish secure configuration baselines, create security policies and guardrails, and translate technical requirements into scalable, repeatable solutions.…See more You'll collaborate with cloud architects, security engineers, platform teams, and client leadership to deliver implementation-ready documentation and cloud governance improvements. The role requires 3+ years of AWS cloud engineering, cloud security, or DevSecOps experience, with hands-on expertise in multi-account AWS environments, VPC networking, security monitoring services, and Infrastructure as Code.