Senior Cloud Security Specialist
Location: Washington, DC (Hybrid)
Job Summary
STAFFXPERT LLC is seeking a Senior Cloud Security Specialist on behalf of our client in Washington, DC. This role is ideal for a seasoned cloud security professional with strong expertise in AWS security, security engineering, compliance, and cloud governance. The successful candidate will help design, assess, and strengthen cloud security controls, support secure infrastructure deployments, and provide guidance to engineering teams on security best practices.
Key Responsibilities
- Conduct security assessments and reviews of AWS cloud environments.
- Evaluate Infrastructure-as-Code (IaC) implementations for adherence to security standards.
- Review cloud platforms for compliance with security policies, controls, and industry best practices.
- Assess AWS environments against security architecture and governance frameworks.
- Identify, document, and help remediate security risks, vulnerabilities, and misconfigurations.
- Implement and enhance AWS security controls, monitoring, and hardening practices.
- Develop and maintain security standards, configuration guidelines, dashboards, and operational playbooks.
- Partner with engineering teams to ensure secure cloud solution implementation.
- Deliver security recommendations, risk findings, and improvement plans to stakeholders.
- Support automation initiatives for security assessments and compliance monitoring.
- Conduct security awareness and technical training sessions for internal teams.
- Recommend and evaluate cloud security tools and process improvements.
Required Qualifications
- 8+ years of experience in information security, cloud security, or cybersecurity.
- 7+ years of hands-on experience securing AWS environments.
- Strong expertise in AWS security services, cloud security architecture, and security engineering.
- Experience with Identity and Access Management (IAM), network security, and security operations.
- Knowledge of cybersecurity frameworks and security controls, including NIST standards and related compliance requirements.
- Experience with DevSecOps practices, Infrastructure-as-Code (IaC), and security automation.
- Strong understanding of Zero Trust principles, vulnerability management, and data protection strategies.
- Proficiency in scripting and security automation.
- Excellent analytical, troubleshooting, and problem-solving skills.
- Strong communication skills with the ability to collaborate effectively with technical and business stakeholders.
- Ability to work independently in a fast-paced environment.
Preferred Qualifications
- AWS Certified Security – Specialty.
- AWS Certified Solutions Architect (Professional or Associate).
- Experience supporting highly regulated or enterprise-scale cloud environments.
- Experience developing cloud security standards, governance frameworks, and security best practices.