Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)
3+ years of experience in cloud security or infrastructure security
Deep knowledge of STIG hardening and vulnerability scanning
Hands-on experience with AWS security services
Familiarity with IAM and encryption best practices
Proficient in scripting languages, particularly Python and Bash
Responsibilities
Design and implement secure AWS architectures following best practices
Configure and manage IAM policies and permissions following least-privilege principles
Implement AWS security services like GuardDuty and WAF
Develop infrastructure security controls using Infrastructure as Code
Perform threat modeling and risk assessments
Implement logging and monitoring solutions with CloudWatch and SIEM
Participate in incident response for cloud security events
Benefits
Full-time, 100% onsite role with standard office hours
Collaboration opportunities within DevSecOps teams
Direct involvement in shaping security posture for cloud architectures
Engagement in incident response efforts for hands-on experience
Possibility to contribute to compliance and regulatory adherence within AWS environment
Full Job Description
RDTS is seeking a skilled AWS Security Engineer to design, implement, and maintain secure cloud architectures within AWS. This role is responsible for strengthening cloud security posture, implementing preventative and detective controls, and ensuring compliance with organizational and regulatory requirements. The ideal candidate combines deep AWS technical knowledge with a strong security engineering mindset.
The position is 100% onsite and full-time, Monday-Friday with standard office hours.
Key Responsibilities:
Design and implement secure AWS architectures aligned with security best practices
Configure and manage IAM policies, roles, and permission boundaries using least-privilege principles
Implement and manage security services such as AWS GuardDuty, Security Hub, Inspector, Macie, and WAF
Develop and maintain infrastructure security controls using Infrastructure as Code (Terraform, AWS CDK Python)
Perform threat modeling, risk assessments, and vulnerability remediation
Implement logging, monitoring, and alerting strategies using CloudTrail, CloudWatch, and centralized SIEM solutions
Participate in incident response efforts for cloud-related security events
Automate security checks and compliance validation across AWS environments
Collaborate with DevOps and engineering teams to embed security into CI/CD pipelines (DevSecOps)
Responding to RFIs
Requirements
Must possess an active Security Clearance
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)
3+ years of experience in cloud security or infrastructure security
Strong understanding of STIG hardening, vulnerability scanning, and remediation processes
Strong hands-on experience with AWS security services and architecture
Understanding of IAM, encryption (KMS), and key management best practices
Experience with network security in AWS (VPCs, routing, firewalls)
Proficiency in scripting languages (Python, Bash)
Experience with Infrastructure as Code (Terraform or AWS CDK Python)
Understanding of compliance frameworks such as NIST 800-53, RMF, CIS Benchmarks, and FedRAMP
Desired Qualifications:
Experience with STIG hardening
Experience with container security (EKS, ECS, image scanning)
Knowledge of identity federation (SSO, SAML, OIDC)
Experience integrating AWS logs with SIEM platforms
Familiarity with Zero Trust architecture principles
