Lead, mentor, and develop a team of security engineers focused on AWS hardening, Terraform automation, CI/CD security, monitoring, and incident response
Establish enterprise-wide AWS security standards, policies, and best practices
Oversee the overall IAM strategy, including roles, policies, identity federation, and least-privilege enforcement
Guide engineers on AWS Lambda development, serverless architecture, secure coding, and scalable deployments
Manage deployment and configuration of AWS native security tools including Security Hub, GuardDuty, Config/Config Rules, KMS, and VPC security controls
Collaborate with DevOps teams to embed security into CI/CD pipelines and Infrastructure as Code workflows
Enforce security controls for logging, encryption, segmentation, patching, and vulnerability management
Drive automation for drift detection, patching, remediation, and compliance reporting
Oversee detection and response activities for AWS security events
Lead threat investigations, RCA processes, and remediation plans
Maintain and improve security runbooks, tabletop exercises, and escalation procedures
Continuously evaluate AWS environments to identify cost-effective security enhancements
Manage AWS risk register, security assessments, internal controls, and compliance workflows
Ensure readiness for audits including SA&A, NIST, FISMA, and FedRAMP
Coordinate evidence gathering, control testing, gap remediation, and auditor engagement
Conduct configuration reviews, vulnerability scans, and compliance checks
Review and approve new AWS architectures from a security perspective
Partner with engineering and development teams to train and promote secure cloud practices
Report security risks, KPIs, and metrics to senior leadership
Participate in on-call rotations to support 24/7 production systems and incident response
Qualifications
Required Qualifications
6 years of experience, may have lead experience
6+ years of experience in cloud security or cybersecurity
Proven experience managing or leading security engineering teams
Strong understanding of AWS security controls—identity, logging, encryption
Expert knowledge of AWS IAM, KMS, encryption, CloudTrail, CloudWatch, and AWS security services
Advanced hands-on Terraform experience, including writing and reviewing modules
Experience building and maintaining AWS Lambda functions
Ability to interpret access logs, configurations, and IAM policies
Experience securing large, multi-account AWS environments
Must be a U.S. Citizen
Must be able to obtain and maintain the required Agency clearance
Preferred Qualifications
Bachelors or Masters degree
AWS certifications (Cloud Practitioner, Security Specialty, etc.)
Security compliance or audit certifications
Experience with container security (EKS/ECS)
Scripting experience in Python or Bash for automation
Target Salary Range $86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement
Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
- EEO
- EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
