Cloud Security Engineer (AWS)

Piper Companies is seeking a Security Engineer (AWS) to join a growing cybersecurity team supporting secure cloud infrastructure and compliance initiatives. This opportunity is based in the RTP, NC area and follows a hybrid schedule requiring 2 days onsite per week. The Cloud Security Engineer will be responsible for securing AWS and Kubernetes environments, validating compliance requirements, identifying security gaps, and partnering with cross-functional teams to strengthen cloud security posture. This role is also open to candidates with a strong DevOps background who are interested in transitioning into cloud security.

Responsibilities of the Security Engineer (AWS):

• Ensure AWS cloud environments are securely configured and aligned with industry best practices.
• Assess and validate compliance with STIGs, CIS benchmarks, and NIST 800-53 controls.
• Identify security vulnerabilities and configuration gaps and drive remediation efforts through ticket management and stakeholder engagement.
• Collaborate with DevOps, Infrastructure, and Compliance teams to support secure cloud operations.
• Review and secure Kubernetes deployments and containerized workloads.
• Automate security processes using scripting and infrastructure-as-code tools.
• Conduct security reviews, risk assessments, and vulnerability analyses.
• Facilitate meetings with stakeholders to communicate findings, recommendations, and remediation plans.
• Maintain documentation related to security configurations, standards, and procedures.
• Stay current with emerging cloud security threats, technologies, and best practices.

Qualifications for the Security Engineer (AWS):

• Experience securing AWS cloud environments and cloud-native services.
• Strong understanding of Kubernetes security, container security, and secure deployment practices.
• Background in Security Engineering, Cloud Security, DevOps, or Infrastructure Engineering.
• Knowledge of AWS security services including IAM, KMS, CloudTrail, GuardDuty, Security Hub, and WAF.
• Experience with compliance frameworks including STIGs, CIS Benchmarks, and NIST 800-53.
• Hands-on experience with scripting and automation tools such as Python, Terraform, or CloudFormation.
• Strong understanding of networking concepts including VPCs, security groups, NACLs, VPNs, and firewalls.
• Excellent communication, problem-solving, and stakeholder management skills.
• Ability to work independently in an Agile environment.
• Authorized to work in the US for any employer

Preferred Qualifications for the Security Engineer (AWS):

• Experience with Wiz, Tenable, or similar cloud security platforms.
• Hands-on experience with SIEM tools, alerting, and security monitoring.
• AWS Certified Security Specialty, CISSP, or similar security certifications.
• Prior experience in regulated or compliance-driven environments.
• DevOps engineers with strong AWS, Kubernetes, and automation experience looking to move into a dedicated security role are encouraged to apply.

Technical Environment:

• AWS (IAM, KMS, CloudTrail, GuardDuty, Security Hub, WAF)
• Kubernetes
• Terraform and CloudFormation
• Python
• SIEM Platforms
• Wiz, Tenable, and Vulnerability Management Tools
• NIST 800-53
• STIGs and CIS Benchmarks
• Cloud Networking and Security

Compensation for the Security Engineer (AWS):

• Compensation: $60-$65/hr
• Long-term contract opportunity with potential for extension
• Full Health, Dental, Vision, PTO, Holidays, Sick Leave as Required by Law

Keywords: Security Engineer, AWS Security, Cloud Security, Kubernetes Security, DevSecOps, DevOps, NIST 800-53, STIG, CIS Benchmarks, Terraform, CloudFormation, IAM, GuardDuty, Security Hub, WAF, Vulnerability Management, Wiz, Tenable, SIEM, Cloud Infrastructure, Automation, RTP, Raleigh, North Carolina.

This position opened for applications on August 21, 2026, and will remain open for at least 30 days from the posting date.

#LI-KI1 #LI-HYBRID

Provide your feedback on BizChat