Cyber - AWS Forward Deployed Security Engineer; FDE; Senior Consultant

Position: Cyber - AWS Forward Deployed Security Engineer (FDE) - Senior Consultant

Cyber - AWS Forward Deployed Security Engineer (FDE) - Senior Consultant

Join Deloitte’s Cloud Cyber Risk practice as a Forward Deployed Security Engineer and help organizations secure their Amazon Web Services (AWS) cloud and AI workloads at scale while working directly with client engineering teams. This is not an assessment-and-handoff role. You will design, build, deploy, and operate secure-by-default AWS environments and automated security controls across generative AI services, container and data platforms, infrastructure-as-code, and secure delivery pipelines.

This role is designed for a hands-on engineer who enjoys solving complex cloud security challenges, building working automation, and supporting security outcomes in production environments.

Recruiting for this role ends on 12/31/2026.

As an Engineering and Product Engineer III on the Cloud Cyber Risk team, you will be responsible for:

• Embed directly with client cloud and platform engineering teams to design, build, deploy, and operate automated security controls across AWS environments from initial design through production support.
• Design and implement security guardrails for AWS generative artificial intelligence (AI) and machine learning services, including Amazon Bedrock, Amazon Bedrock Agent Core, and Amazon Sage Maker, as well as containerized and serverless workloads on Amazon Elastic Kubernetes Service (EKS).
• Build automated data protection and data loss prevention capabilities using Amazon Macie, AWS Key Management Service (KMS), and encryption and tokenization patterns across Amazon Simple Storage Service (S3), databases, and analytics platforms.
• Deploy and maintain AWS-native security services, including AWS Security Hub, Amazon Guard Duty, AWS Config, AWS Identity and Access Management (IAM) Access Analyzer, and AWS Cloud Trail, within client monitoring and security operations workflows.
• Write and maintain production infrastructure-as-code using Terraform and/or AWS Cloud Formation, integrate security scanning into continuous integration / continuous deployment (CI/CD) pipelines, and contribute reusable modules, runbooks, and reference implementations for future engagements.

A successful candidate would possess these skills:
Ability to work independently and collaborate as part of a team Effective written and verbal communication skills Meticulous attention to detail and quality of work product Ability to build and sustain professional relationships Ability to lead projects or work streams

Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment

Strong interpersonal skills and professional demeanor Ability to meet deadlines Ability to provide clear guidance to others The team

Deloitte’s Cloud Cyber Risk team helps organizations pursue growth, innovation, and performance through proactive management of cyber risk. Our Forward Deployed Security Engineers work directly within client teams, combining risk, regulatory, and technology capabilities with hands-on engineering to design, build, and operate scalable, automated AWS cloud security solutions. This team works closely with clients to implement controls in production environments and support security outcomes at scale.

Qualifications

Required:

• 5+ years of experience in cloud security, cybersecurity, technology risk, or technology consulting; and a bachelor’s degree in computer science, cybersecurity, information technology, engineering, or a technical field
• 3+ years of hands‑on experience designing, building, or operating security solutions in Amazon Web Services (AWS) production environments, including AWS Security Hub, Amazon Guard Duty, AWS Config, AWS Identity and Access Management (IAM), AWS Key Management Service (KMS), and AWS Cloud Trail
• 2+ years of experience using Terraform and/or AWS Cloud Formation to deploy infrastructure and security controls through production deployment pipelines
• Experience securing at least one of the following in a production environment:
  Amazon Elastic Kubernetes Service (EKS) / containers, Amazon Sage Maker or Amazon Bedrock workloads, or data protection using Amazon Macie
• Experience integrating security controls…