Secures AWS cloud infrastructure through vulnerability management, IAM audits, security monitoring, incident response, threat modeling, compliance assessments, and automated remediation. Manages AWS security controls, Terraform infrastructure, CloudWatch alerting, CI/CD security practices, documentation, audits, and risk assessments while supporting 24/7 production systems and maintaining NIST, FISMA, and FedRAMP compliance.
Responsibilities
The AWS Security Engineer is responsible for ensuring the security, compliance and protection of our cloud-based infrastructure. The ideal candidate will have hands-on experience with AWS security services, cloud risk assessments, incident response and continuous security monitoring. This role partners with Cloud Engineering, DevOps and Application teams to maintain a secure and resilient cloud environment.
Day to Day Work Responsibilities:
- Lead and support vulnerability scanning and remediation efforts for cloud resources
- Strong understanding of IAM Roles/Policies and Identity Federation, Encryption, KMS, secrets management
- Provision and manage AWS infrastructure using infrastructure as code (IaC) using tools such as Terraform
- Write custom scripts for CloudWatch custom metrics and alarms based on application specific probes
- Implement alerting and remediation automation based on probe output
- Assist in incident response, investigation and root cause analysis of cloud security events.
- Develop and maintain security architecture documentation, runbooks and procedure documents
- Run AWS security posture assessments using automated tools
- Experience with AWS cloud security monitoring and detection tooling
- Contribute to best practices around DevOps, automation and deployments and work with teams to embed security best practices into CI/CD pipelines and infrastructure as code
- Implement and improve AWS security controls, guardrails and baseline configurations
- Continuously evaluate AWS environments for cost-effective security improvements
- Conduct threat modeling, vulnerability analysis and remediation coordination
- Support internal and external audits by gathering evidence, validating configurations and preparing documentation
- Maintain cloud compliance requirements, NIST, FISMA and FedRAMP
- Assist in risk assessments and security control testing
- Support change control and documentation to reflect accurate system and process ownership
- Evaluate merging cloud security tools and recommend security enhancements
- Keep cloud environments compliant with security standards and best practices
- Participate in on-call rotations to support 24/7 production systems and respond to incidents as they arise
Basic Qualifications:
- Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA or 12 years of experience with HS Diploma/equivalent
- 6 years of experience in cloud security or cybersecurity
- Proficient in scripting languages like Python and Bash
- Hands-on experience with ECS, EKS, EC2, Lambda
- Proficient in Git and CI/CD pipelines
- Strong Terraform proficiency, writing modules, variables and workspaces
- Deep knowledge of AWS security services, including IAM, KMS, GuardDuty, Security Hub, CloudTrail and Config Rules
- Perform IAM policy and permissions audits to enforce least privilege
- Ability to read and interpret access logs, cloud account configurations and IAM policies
- Strong written and verbal communication skills for technical and non-technical stakeholders
- Excellent analytical and problem-solving skills
- Must be a US Citizen.
- Must be able to obtain and maintain a Public Trust clearance
Preferred Qualifications:
- Cloud certification (AWS Cloud Practitioner, Security Specialty)
- Security compliance or audit certification
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
Target Salary Range$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEOEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.Similar Jobs
Artificial Intelligence • Cybersecurity • Quantum Computing • Defense
Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers.
Top Skills:
Active DirectoryAcunetixAnchoreAnsibleAppgateAWSCis BenchmarksCloud SqlCloud StorageCloudFormationCompute EngineDevsecopsDisa StigsEbsEc2FedrampFismaGitlabGoogle Cloud Platform (Gcp)IamInvictiJIRAKubernetesLinuxNessusNist 800-53OktaOpenscapPalo Alto Networks FirewallsRdsS3ServicenowSplunk EnterpriseTenable Security CenterTerraformTrend Micro Deep SecurityTrivyTwistlockWindowsWorkspaces
.jpg)
Healthtech
Designs, implements, and manages AWS cloud security policies, architecture, and technologies. The role oversees firewalls, DLP, vulnerability scanning, monitoring, logging, IAM, incident response, compliance, and remediation. It provides security guidance for AWS solutions, supports migrations of mission-critical applications, researches new technologies, documents standards, presents to varied audiences, and mentors less experienced engineers. The position requires strong AWS expertise, infrastructure-as-code proficiency, knowledge of regulated healthcare environments, and experience securing highly available cloud and serverless architectures.
Top Skills:
Active DirectoryAdfsAmazon CloudfrontAmazon CloudwatchAmazon InspectorAmazon MacieAmazon VpcApplication Load BalancerAWSAws CloudformationAws CloudtrailAws ConfigAws Control TowerAws GuarddutyAws LambdaAws Security HubAws ShieldAws Transit GatewayAws Trusted AdvisorAws WafAzureAzure AdBashCi/CdCisDatadogDynatraceGCPHipaaHitrustIamInfrastructure As CodeJSONLanding Zone AcceleratorNetwork AclsNetwork Load BalancerNew RelicNistPci DssPythonSecurity GroupsSoc 2SplunkTerraformVpc Flow LogsYaml
Virtual Reality
Independently manages AWS infrastructure, Terraform-based deployments, cloud security, IAM, access controls, DevSecOps, production monitoring, compliance, SOC 2 audits, vulnerability remediation, disaster recovery, endpoint security, and SageMaker environments. Supports segregation of duties, secure client onboarding, security training, documentation, and production troubleshooting across remote, US business hours.
Top Skills:
AppcheckAWSAws SagemakerDevsecopsIamInfrastructure As CodeScalefusionSecurityscorecardTerraform
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
