System Security Engineer

Security Engineer (Application Development / AWS Security)

Location: Irvine, CA (Onsite)

Duration: 12-Month Contract

Job Summary

We are seeking an experienced Security Engineer to strengthen AWS cloud security across application development, infrastructure, and CI/CD pipelines. The ideal candidate will combine hands-on AWS security expertise, secure coding, infrastructure-as-code reviews, automation, and cloud incident response while partnering closely with application developers and reporting to the Sr. Director of Information Security.

Key Responsibilities

• Design and review AWS IAM policies, roles, cross-account trust, permission boundaries, and least-privilege access.
• Configure and optimize AWS security services, including GuardDuty, Security Hub, CloudTrail, Config, Inspector, KMS, and Secrets Manager.
• Review AWS infrastructure and services, including Lambda, Step Functions, EventBridge, S3, VPCs, and security groups, for security risks.
• Review Terraform, CloudFormation, and other infrastructure-as-code templates; implement security scanning and policy-as-code controls using tools such as Checkov, tfsec, and OPA.
• Secure CI/CD pipelines by addressing credential management, OIDC federation, artifact integrity, and software supply-chain risks.
• Develop security automation and tooling using Python, Go, or similar programming languages.
• Perform threat modeling, application security reviews, dependency and container scanning, and OWASP-based assessments.
• Implement Cloud Security Posture Management (CSPM), tune security policies, and integrate cloud alerts with SIEM platforms.
• Support cloud incident response, threat detection, and automated containment.
• Document security controls, remediation guidance, and best practices for developer awareness.
• Collaborate with application teams to prioritize remediation based on exploitability, business risk, and potential blast radius.

Required Qualifications

• Strong hands-on experience with AWS security and cloud security fundamentals.
• Deep understanding of IAM, least-privilege access, cross-account permissions, and non-human identities.
• Experience securing AWS serverless and event-driven architectures.
• Proficiency in Python, Go, or a similar programming language for security automation.
• Experience with Terraform or equivalent IaC tools and CI/CD security controls.
• Knowledge of application security, OWASP, authentication, input validation, secrets management, and vulnerability scanning.
• Experience with CSPM tools, cloud monitoring, SIEM integration, and cloud incident response.
• Strong communication, documentation, and stakeholder management skills.
• Ability to work onsite in Irvine, CA, and report to the Sr. Director of Information Security, with a dotted-line relationship to application leadership.

Preferred Qualifications

• AWS Certified Security – Specialty, OSCP, or CKS certification.
• Experience with SOC 2, ISO 27001, or FedRAMP compliance.
• Familiarity with cloud-native runtime security and advanced CSPM solutions.