Cloud Security Engineer (AWS)

Job Title: Cloud Security Engineer (AWS)
Location: Princeton, NJ
Type: Full-time Contract

Job Summary:

We are seeking a skilled Cloud Security Engineer with expertise in AWS to ensure the security, integrity, and confidentiality of our cloud infrastructure. The ideal candidate will design, implement, and maintain robust cloud security solutions to protect data, systems, and applications. You will work closely with DevOps, IT, and security teams to monitor and enhance the security posture of our cloud environments.

Key Responsibilities:

• Design and implement security architectures for AWS cloud environments, including IAM policies, security groups, and encryption methods.
• Monitor and audit AWS environments for security breaches, vulnerabilities, and compliance violations.
• Implement security best practices in the areas of infrastructure, applications, data protection, and identity & access management (IAM).
• Work with DevOps and engineering teams to integrate security into the CI/CD pipeline.
• Identify and mitigate cloud security risks using tools like AWS Security Hub, GuardDuty, and CloudTrail.
• Implement and manage encryption strategies (e.g., KMS) for data at rest and in transit.
• Conduct regular security assessments, vulnerability scans, and penetration tests on cloud infrastructure.
• Ensure compliance with security standards such as ISO 27001, SOC 2, and GDPR.
• Respond to security incidents, manage incident response processes, and lead investigations of security breaches.
• Develop and maintain documentation for cloud security processes and policies.

Required Skills:

• Proven experience as a Cloud Security Engineer or similar role with AWS.
• Strong knowledge of AWS cloud services, including EC2, S3, VPC, IAM, Lambda, and RDS.
• Experience with AWS security services such as AWS WAF, Shield, Security Hub, GuardDuty, CloudTrail, and KMS.
• Proficiency in implementing security controls and threat protection in AWS environments.
• Familiarity with DevOps practices and CI/CD pipelines (Jenkins, Docker, Kubernetes).
• Experience with automation tools like AWS CloudFormation, Terraform, or similar.
• Knowledge of network security, firewalls, and VPNs in cloud environments.
• Experience with compliance frameworks such as PCI DSS, ISO 27001, SOC 2, or NIST.
• Strong scripting skills (Python, Shell, or PowerShell) to automate security tasks.

Preferred Qualifications:

• AWS Certified Security Specialty or AWS Solutions Architect certifications.
• Experience with multi-cloud security (e.g., Azure, Google Cloud) is a plus.
• Knowledge of container security and microservices architecture.
• Familiarity with SIEM tools like Splunk or AWS CloudWatch for security monitoring.