The Consortium, Inc. - Temp To Permanent AWS Cloud Security Engineer (Python, JavaScript, Security Automation, MITRE ATT&CK)

AI Engineer is needed in United States.

Client: The Consortium, Inc.

Location: Remote from United States

Contract: Temp-to-hire

Job Description

This is a senior level security engineer role, where candidates are expected to have experience supporting application firewalls and security automation in enterprise-level companies operating in AWS environments. The individual will serve as the central point of security support for all application teams, focusing on automations using Python, JavaScript, AWS CDK, and Cloud Formation.

Requirements

Must Have Technical Skills:

• AWS - CDK
• AWS - Cloud Formation
• JavaScript (ES6)
• MITRE ATT&CK
• Python
• SEIM
• Tines
• WAF (Web Application Firewall)

About You:

• 3 to 5 years of hands-on experience in cyber defense, including threat hunting, detection engineering, or incident response within a cloud or enterprise environment.
• Practical experience in AWS environments, including telemetry investigation (CloudTrail, IAM logs, VPC Flow Logs, CloudWatch).
• Experience with SIEM queries and detections, with a focus on improving signal-to-noise and reducing false positives. Sumo Logic experience is a plus.
• Experience executing structured threat hunts, analyzing data, documenting findings, and recommending actionable improvements.
• Experience supporting incident response activities, including log analysis and documentation of findings and remediation steps.
• Familiarity with attacker behaviors and frameworks like MITRE ATT&CK, applicable in practical detection and investigation scenarios.
• Working knowledge of scripting or automation (Python, PowerShell, or Bash) to enhance efficiency in investigations and reporting.
• Strong written and verbal communication skills for producing investigation summaries and collaborating with technical teams.
• A collaborative mindset, curiosity about emerging threats, and a desire for continuous improvement in detection quality and response effectiveness.
• Ability to travel 1-3 times per year to College Board offices.
• Authorization to work in the United States.

Nice to Have:

• Experience in purple team exercises or detection validation activities.
• Relevant certifications (Security+, GCIA, GCIH, or AWS Security Specialty).
• Exposure to modern cloud-native architectures (containers, serverless, CI/CD pipelines).

About the Team

The Cloud & Product Security Engineering team builds and operates cloud-native security solutions that protect enterprise and mission-critical digital products. The team focuses primarily on AWS and is responsible for engineering automated, scalable controls that secure assessment platforms used by millions of students each year. They partner closely with the Information Security organization to translate risk priorities and product security requirements into engineered solutions.

The team designs and deploys capabilities that enhance security visibility and enable automated detection and remediation in cloud environments, operating real-world, production security systems at scale.

About the Opportunity

As a Senior Cloud Security Engineer, you will lead the design and delivery of cloud-focused security capabilities that mitigate enterprise risk. Responsibilities include collaborating closely with security and engineering partners, researching and prototyping solutions, and delivering production-ready security systems. Successful candidates will contribute to thoughtful design in AWS, ensuring secure implementations across engineering teams.

Core Responsibilities

Build and Scale Cloud Security Capabilities (50%):

• Design and deliver cloud-native security solutions.
• Develop code and infrastructure as code for operationalizing security controls.
• Deploy and manage secure cloud security services in production.
• Integrate security capabilities into CI/CD pipelines.

Translate Security Priorities into Production Systems (30%):

• Partner across Information Security to create engineered solutions.
• Research, prototype, and validate new approaches.
• Provide risk assessments and data-driven recommendations.
• Identify and implement automated fixes for systemic security weaknesses.

Improve and Evolve Security Engineering Patterns (20%):

• Enhance reusable security patterns and automation frameworks.
• Continuously improve security tooling and services.
• Contribute to design improvements within AWS.
• Evaluate and promote new security standards and tools.