AWS Cloud Security Consultant (Application & AI Security)

Are you looking to take the next step in your career as an AWS Cloud Security Consultant (Application & AI Security)? Let's chat and see if we are a good match!

Opportunity:

Virtual Service Operations is searching for an AWS Cloud Security Consultant (Application & AI Security) to join our team. In this role, you'll help customers ship secure code and secure AI workloads. The work spans DevSecOps pipelines, code and container scanning, penetration testing, and protecting generative AI applications on Amazon Bedrock and SageMaker.

Responsibilities:

• Embed security into CI/CD pipelines: SAST, DAST, SCA, secrets scanning, and container image scanning (GitLab, GitHub Actions, Jenkins, or CodePipeline)
• Perform secure code reviews and threat modeling for cloud-native applications, APIs, and microservices
• Conduct or coordinate penetration tests and vulnerability assessments, and drive findings through to remediation
• Secure container and serverless workloads on EKS, ECS, and Lambda: image hardening, runtime protection, and least-privilege execution roles
• Protect applications with AWS WAF, Bot Control, and API Gateway authorization
• Secure generative AI workloads with Bedrock Guardrails, prompt-injection and data-leakage controls, model access policies, and invocation logging
• Map AI workloads to NIST AI RMF, OWASP Top 10 for LLM Applications, and MITRE ATLAS

Required Qualifications:

• Demonstrated experience with at least 2 of the 4 authorized service types
• AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
• Proficient with AWS security services, especially AWS WAF, Inspector, Secrets Manager, and Security Hub
• Understanding of security frameworks (NIST, ISO, CIS) and the OWASP Top 10
• Hands-on with SAST/DAST/SCA tools (e.g., Fortify, SonarQube, Checkmarx, Snyk, Burp Suite)
• Container security on Kubernetes (EKS or equivalent)
• Able to read and review code in at least one of Python, Java, JavaScript/TypeScript, or Go
• DoD 8140-compliant baseline certification (e.g., Security+, CISSP)
• Willing to complete annual AESP training

Preferred Qualifications:

• OSCP, GWAPT, GPEN, or CSSLP
• Hands-on with Amazon Bedrock, SageMaker, or other generative AI platforms
• AWS Certified AI Practitioner or Machine Learning Engineer – Associate
• DoD DevSecOps experience (Platform One, Iron Bank hardened containers)
• STIG-hardened container images
• No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferred