Location: Manassas, VA (Onsite minimum 2 days per week)
Department: Global Security
Role Overview
Santcore Technologies is partnering with a global leader in secure financial messaging services to support their digital transformation and hybrid cloud adoption strategy. This role plays a critical part in strengthening cloud security posture and ensuring compliance across cloud-hosted infrastructure, applications, and network environments.
The AWS Cloud Security Engineer will contribute to designing, implementing, and operationalizing security controls for evolving cloud environments. As a senior team member, the candidate will work cross-functionally with engineering, platform, and application teams to ensure cloud deployments meet regulatory, compliance, and organizational security standards.
Key Responsibilities
Cloud Security Compliance & Risk Management
- Analyze cloud security compliance gaps and conduct root cause analysis for identified vulnerabilities and misconfigurations.
- Develop and recommend remediation strategies to address compliance risks and security weaknesses.
- Evaluate security exception requests and perform risk assessments to support business decision-making.
- Support vulnerability management processes, including monitoring, reporting, and remediation coordination.
Cloud Security Engineering & Implementation
- Collaborate with Cloud Platform Security Engineering teams to design, implement, and operationalize cloud security services and controls.
- Support application and infrastructure teams during cloud migration by ensuring adherence to security best practices and compliance requirements.
- Contribute to the development and improvement of security frameworks, policies, and standards aligned with regulatory and organizational objectives.
Automation & Continuous Improvement
- Design and implement automation solutions to improve security monitoring, compliance enforcement, and operational efficiency.
- Identify repeatable security processes and develop scalable automated solutions.
Stakeholder Collaboration & User Support
- Partner with application owners, developers, and infrastructure teams to onboard and support cloud security tools and services.
- Conduct user acceptance testing (UAT), troubleshoot security tool issues, and provide technical guidance to users.
- Translate security requirements and remediation plans into Agile epics, user stories, and work items for engineering teams.
Documentation & Governance
- Develop and maintain cloud security architecture documentation, engineering guidelines, and operational procedures.
- Ensure documentation aligns with industry standards, regulatory requirements, and organizational security governance.
Required Qualifications
- Experience implementing and managing cloud security controls, preferably in AWS environments.
- Strong understanding of cloud infrastructure, networking, and application security principles.
- Experience with vulnerability management, compliance frameworks, and risk assessment methodologies.
- Ability to translate technical security requirements into actionable engineering deliverables.
- Experience working in Agile or DevOps environments.
- Strong analytical, troubleshooting, and stakeholder communication skills.
Preferred Qualifications
- AWS Security or Cloud certifications (e.g., AWS Certified Security Specialty).
- Experience supporting hybrid cloud environments.
- Familiarity with automation tools, scripting, or Infrastructure as Code (IaC) frameworks.
- Knowledge of regulatory or financial industry compliance standards.