Are you looking to take the next step in your career as an AWS Cloud Security Consultant (Application & AI Security)? Let's chat and see if we are a good match!
Opportunity:
Virtual Service Operations is searching for an AWS Cloud Security Consultant (Application & AI Security) to join our team. In this role, you'll help customers ship secure code and secure AI workloads. The work spans DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI applications on Amazon Bedrock and SageMaker.
Responsibilities:
- Embed security into CI/CD pipelines: SAST, DAST, SCA, secrets scanning, and container image scanning (GitLab, GitHub Actions, Jenkins, or CodePipeline)
- Perform secure code reviews and threat modeling for cloud-native applications, APIs, and microservices
- Conduct or coordinate penetration tests and vulnerability assessments, and drive findings through to remediation
- Secure container and serverless workloads on EKS, ECS, and Lambda: image hardening, runtime protection, and least-privilege execution roles
- Protect applications with AWS WAF, Bot Control, and API Gateway authorization
- Secure generative AI workloads with Bedrock Guardrails, prompt-injection and data-leakage controls, model access policies, and invocation logging
- Map AI workloads to NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS
Required Qualifications:
- Demonstrated experience with at least 2 of the 4 authorized service types
- AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
- Proficient with AWS security services, especially AWS WAF, Inspector, Secrets Manager, and Security Hub
- Understanding of security frameworks (NIST, ISO, CIS) and the OWASP Top 10
- Hands-on with SAST/DAST/SCA tools (e.g., Fortify, SonarQube, Checkmarx, Snyk, Burp Suite)
- Container security on Kubernetes (EKS or equivalent)
- Able to read and review code in at least one of Python, Java, JavaScript/TypeScript, or Go
- DoD 8140-compliant baseline certification (e.g., Security+, CISSP)
- Willing to complete annual AESP training
Preferred Qualifications:
- OSCP, GWAPT, GPEN, or CSSLP
- Hands-on with Amazon Bedrock, SageMaker, or other generative AI platforms
- AWS Certified AI Practitioner or Machine Learning Engineer – Associate
- DoD DevSecOps experience (Platform One, Iron Bank hardened containers)
- STIG-hardened container images
- No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferred
- B.S. in Computer Science, Information Security, or a related field, or equivalent professional experience (3+ years in security)
- 2+ years working with AWS cloud
- This is a remote position
- Please note that this specific position requires U.S. citizenship status
What is Important to Us:
- You are an excellent communicator in writing and speaking.
- You have the ability to work independently but also value teamwork.
- Your problem-solving skills are excellent.
- You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
- You seek a community of virtue-centered co-workers and clients.
What we offer you: As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.
More About VSO: VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers