Cloud Security Operations Analyst / Engineer

Our client is seeking a skilled Cloud Security Operations Analyst / Engineer to support our client in Washington, DC. In this role, you will be responsible for maintaining, monitoring, and enhancing cloud security postures across AWS environments, ensuring continuous compliance with established security baselines and operational standards. Leveraging a strong foundation in general IT infrastructure and cloud technologies, you will collaborate closely with senior security engineers to execute vulnerability remediation, manage IAM configurations, respond to security alerts, and support automated infrastructure deployments.

Key Responsibilities

• Security Monitoring & Incident Response: Monitor, analyze, and respond to alerts from GuardDuty, Security Hub, CloudWatch, and SIEM tools; assist with incident response investigations and evidence gathering.
• IAM & Access Management: Execute daily IAM administration, including user, role, and policy management following least-privilege access principles.
• Vulnerability & Compliance Management: Perform vulnerability remediation activities identified through AWS Inspector; assist in managing AWS Config rules, security baselines, and audit compliance reviews.
• Security Operations & Control: Implement AWS security controls and configurations under guidance from senior engineers; maintain operational security tasks, security documentation, and patching routines.
• Infrastructure Support: Assist with infrastructure deployments and automation using Terraform and CloudFormation across core AWS services (EC2, S3, VPC, RDS, Lambda).

Qualifications

• General IT Experience: Minimum of 5 years in IT with broad knowledge across architecture, infrastructure, networking, operating systems (Linux administration/troubleshooting), and databases.
• Cloud & Security Experience: 3+ years of hands-on experience in cloud infrastructure and applications, with deep familiarity with AWS security tools (IAM, Control Tower, Security Hub, GuardDuty, Config, CloudTrail, KMS, Secrets Manager).
• Scripting & Technical Skills: Practical knowledge of networking concepts (firewalls, security groups, VPCs) and scripting capability in Python, PowerShell, or Bash.
• Soft Skills & Work Ethic: Strong communication and interpersonal skills, self-motivated, and comfortable working both independently and collaboratively within an integrated team environment.