IT Security Specialist II – AWS Security

The remote
IT Security Specialist II – AWS Security will serve as a senior, hands-on cloud security specialist supporting complex AWS environments and federal information systems in a remote work environment.

This position combines deep technical AWS security expertise with the documentation and compliance responsibilities required within federal cybersecurity programs. The successful candidate will assess and validate security controls, analyze vulnerabilities, review security findings for accuracy and completeness, monitor security posture and metrics, coordinate remediation with technical teams, and support compliance activities for FISMA High and Moderate systems.

The ideal candidate is technically strong enough to work directly with cloud engineers, system administrators, developers, and security teams, while also being able to clearly document findings, maintain security evidence, and support federal cybersecurity processes such as POA&Ms and security assessments.

Success in this role means identifying meaningful security risks, validating that controls are functioning as intended, ensuring remediation activities actually resolve identified weaknesses, and producing accurate, defensible security findings and documentation that federal stakeholders can rely on.

The IT Security Specialist II – AWS Security will provide hands-on technical security support across AWS cloud environments while supporting federal security assessment, vulnerability management, control validation, and compliance activities.

Responsibilities include:

• Assess the security posture of complex AWS cloud environments and identify technical security risks, vulnerabilities, and control weaknesses.
• Implement, review, validate, and monitor security controls within AWS environments.
• Evaluate whether security controls are operating effectively and whether supporting technical evidence accurately demonstrates compliance.
• Perform technical quality assurance reviews of security findings, vulnerability reports, assessment results, and supporting documentation.
• Operate and work with security scanning and monitoring technologies to identify vulnerabilities, configuration weaknesses, and potential security concerns.
• Analyze vulnerability findings and prioritize remediation based on technical risk, system impact, and applicable federal requirements.
• Work directly with cloud engineers, system administrators, developers, and infrastructure teams to coordinate vulnerability remediation and security improvements.
• Review remediation evidence and perform follow-up validation or retesting to confirm findings have been appropriately resolved.
• Develop and monitor security metrics that provide visibility into vulnerabilities, control effectiveness, remediation progress, and overall security posture.
• Support security assessments for FISMA High and Moderate systems.
• Apply NIST security requirements, federal cybersecurity standards, and applicable system security controls when assessing AWS environments.
• Support the development, review, and maintenance of security assessment evidence and compliance documentation.
• Assist with POA&Ms activities, including documenting findings, tracking remediation activities, reviewing evidence, and supporting closure.
• Maintain clear, accurate, and audit-ready documentation describing technical findings, risks, controls, and remediation status.
• Support security repository and compliance-management activities as required.
• Review system security documentation to ensure it accurately reflects the technical environment and implemented controls.
• Collaborate with federal security stakeholders, ISSOs, system owners, engineers, program managers, and other technical personnel.
• Communicate complex technical…