AWS Cybersecurity Consultant

3 month contract

Fully remote

Role: AWS Security Engineer

Type: 3-Month Contract (W2 Only)

Location: Fully Remote

Technical Skills

Skill Depth Needed Context

Terraform Advanced CNAPP onboarding, scanning pipeline

Python (boto3) Advanced Validation & evidence automation

AWS Security Services Deep Guardrails + findings pipeline

SCP / IAM Policy JSON Deep Precise preventive controls

CNAPP tooling Advanced Wiz configuration

AWS Config / Conformance Packs Advanced Framework rule deployment

Event & Log Pipelines Intermediate Cribl

CI/CD (GitHub Actions, Azure DevOps, or similar) Intermediate Shift-left scanning & gating

Overview:

Seeking an experienced AWS Security Engineer with deep hands-on expertise across AWS security architecture, governance, and automation. This role focuses on implementing guardrails, hardening AWS environments, integrating CNAPP tooling, and driving visibility through metrics and automation.

Key Responsibilities:

• Design and manage AWS organizational governance, including Service Control Policies and multi-account structures.
• Implement logging, auditing, and compliance frameworks (CloudTrail, Config, GuardDuty, Security Hub).
• Operate and tune CNAPP/CSPM tools (Wiz.io); onboard accounts, integrate with ticketing and SIEM systems.
• Build and maintain Terraform modules and policy-as-code integrations for scalable security enforcement.
• Automate validation and evidence collection using Python (boto3) and AWS CLI.
• Drive vulnerability prioritization using contextual risk scoring.
• Enforce IAM least privilege and cross-account role management.
• Contribute to observability and data routing via Cribl, Firehose, or Kinesis.
• Ensure alignment with HIPAA safeguards and security best practices.
• Develop security KPIs and reporting dashboards for governance and remediation tracking.

Required Skills:

• Deep AWS Security expertise (SCP, IAM, GuardDuty, Config, Security Hub)
• Advanced Terraform and Python (boto3)
• Hands-on with Wiz.io or equivalent CNAPP platform
• Experience with CI/CD pipelines (GitHub Actions, Azure DevOps)
• Familiarity with Cribl / Kinesis / Firehose for log routing
• Strong understanding of compliance frameworks (HIPAA preferred)