AWS Cloud Security Engineer – CNAPP

General Dynamics Information Technology

AWS Cloud Security Engineer securing AWS cloud environments and supporting enterprise cloud modernization initiatives. Collaborating within an agile development team for advanced security operations.

Posted 7/16/2026full-timeRemote • 🇺🇸 United StatesSeniorLead💰 $149,469 - $195,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates advanced technical expertise in AWS cloud security, including vulnerability management, compliance monitoring, and incident response. Proficient in implementing CNAPP capabilities and adhering to FedRAMP High and NIST 800-53 standards.

Highest-signal resume keywords

AWS Cloud SecurityCNAPP ImplementationVulnerability ManagementZero Trust ArchitectureCSPM and CIEM

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementCloud Security Posture ManagementCloud Infrastructure Entitlement ManagementWorkload ProtectionRuntime SecurityThreat DetectionCompliance MonitoringIncident ResponseSecurity Baseline ImplementationPolicy Enforcement

Soft Skills

Analytical SkillsProblem-SolvingAttention to Detail

Tools & Technologies

WizAWS Security ServicesSplunkSIEMNew Relic

Certifications & Qualifications

Technical TrainingCybersecurity Certification

Industry Keywords

FedRAMP HighNIST 800-53FISMACIS BenchmarksCloud Security Best Practices

Tech Stack

Tools & technologies

AWSCloudCyber SecuritySplunk

About the role

Key responsibilities & impact

Provide advanced technical expertise in securing AWS cloud environments through continuous vulnerability management, Cloud-Native Application Protection Platform (CNAPP) operations, threat detection, compliance monitoring, and cloud security engineering
Implement, configure, and manage CNAPP capabilities across AWS cloud environments supporting FedRAMP High compliance requirements
Configure and maintain AWS-native security services
Implement and monitor Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), workload protection, runtime security, vulnerability management, attack-path analysis, encryption controls, network segmentation, backup/recovery protections, and continuous compliance monitoring capabilities
Monitor and analyze Wiz vulnerabilities, Splunk alerts, AWS security findings, SIEM events, runtime alerts, and New Relic dashboards to identify threats, validate remediation efforts, and support continuous cloud security operations and incident response activities
Implement and validate security baselines, policy enforcement mechanisms, encryption standards, workload isolation controls, secrets protection, secure storage configurations, and least-privilege access controls aligned with Zero Trust principles
Integrate CNAPP tooling with SIEM, logging, monitoring, alerting, automated remediation, and incident response platforms to support centralized cloud security operations
Support continuous ATO activities by developing and maintaining SSPs, security implementation procedures, SOPs, mitigation plans, technical runbooks, automated remediation playbooks, audit evidence, POA&M documentation, and operational security documentation supporting FedRAMP, NIST 800-53, FISMA, and Judiciary security requirements

Requirements

What you’ll need

Technical Training, Certification(s) or Degree and 10+ years of general experience in information systems required
7+ years of cybersecurity experience with at least 4+ years focused on AWS cloud security and CNAPP technologies
Hands-on experience implementing and operating Wiz and AWS-native CNAPP/security services in enterprise cloud environments
Strong experience with CSPM, CIEM, workload protection, runtime security, vulnerability management, cloud compliance monitoring, and cloud attack-path analysis
Strong understanding of Zero Trust Architecture (ZTA), FedRAMP High, NIST 800-53, FISMA, CIS Benchmarks, and cloud security best practices
Experience supporting vulnerability remediation, incident response, compliance assessments, and continuous monitoring activities in regulated cloud environments
Ability to support after-hours vulnerability scanning, incident response, and critical security remediation activities as required

Benefits

Comp & perks

Comprehensive benefits and wellness packages
401K with company match
Competitive pay
Paid time off
Full flex work weeks