Note: The job is a remote job and is open to candidates in USA. Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively find and fix exploitable attack vectors. The Sr. Cloud Security Engineer, Federal will analyze, design, configure, implement, and validate security solutions for AWS GovCloud infrastructure, focusing on developing security guardrails and automating threat detection.
Responsibilities
- Cloud Security Engineering: Design and implement robust security controls across AWS environments, including AWS IAM, SCPs, VPC security, S3 bucket policies, and key management
- Infrastructure as Code (IaC): Utilize Terraform to deploy and manage security configurations, ensuring "Security as Code" is integrated into all cloud deployments
- DevSecOps Integration: Implement and maintain GitLab CI/CD pipelines for automated security testing and scanning of AWS resources
- Posture Management & Monitoring: Continuously monitor and improve cloud security posture by managing and tuning services such as GuardDuty, Security Hub, AWS WAF, and CloudTrail
- Identity & Access Management: Define and enforce IAM best practices, including least privilege, federated identity, RBAC, and automated remediation of deficiencies
- Threat Modeling & Assessment: Conduct architecture reviews and risk assessments for new cloud features to identify and mitigate vulnerabilities before deployment
- Incident Response & Analysis: Investigate suspected attacks and lead security incident management, providing post-mortem analysis and developing long-term preventive measures
- Compliance & Standards: Develop and maintain security policies and procedures to ensure compliance with FedRAMP and DoD IL-4/5
- Reporting & Metrics: Develop creative reporting mechanisms and metrics to communicate cloud risk and security themes to business owners and leadership
Skills
- Bachelor's degree in Computer Science or Cybersecurity; Military Service Equivalent
- Minimum five (5) years of experience in securing AWS environments
- 5+ years of general cybersecurity experience
- Must be authorized to work in the U.S. and pass a criminal background check
- AWS Certified Security - Specialty preferred
- CISSP or relevant security certifications preferred
- U.S. Government Security Clearance is a plus
Company Overview