What are the responsibilities and job description for the Cloud Security Specialist (AWS) position at Compass Solutions?
Job Description – Senior Cloud Security Specialist (AWS)
The Senior Cloud Security Specialist supports the Security Engineering team by designing, assessing, implementing, and maintaining secure AWS cloud architectures and security controls across cloud, on‑premises, and hybrid environments.
Senior Level Personnel Qualifications (Generic – BOA 3.5.4.2)
- Bachelor’s degree in Information Security, Computer Science, Management of Information Systems, or related field.
- Minimum six (6) years of cybersecurity experience, including cloud security, compliance, and risk management.
- Minimum six (6) years of experience on public cloud platforms (AWS, Azure, Google, or others).
- At least one of the following certifications preferred:
- CompTIA Security
- Certificate of Cloud Security Knowledge (CCSK)
- Professional Cloud Architect
- Professional Cloud Security Engineer
- Certified Cloud Security Professional (CCSP)
Capabilities (Generic – BOA)
- Serve as a cloud security expert integrating sound practices from Identity and Access Management, monitoring, platform standards, network segmentation, encryption, and security controls into cloud platforms.
- Collaborate with Enterprise Architects, functional area architects, and security specialists to ensure secure cloud IT systems and platforms.
TOR‑Specific Requirements and Experience (AWS)
- Minimum five (5) years of hands‑on AWS security experience.
- AWS Certified Security – Specialty (strongly preferred).
- AWS Certified Solutions Architect – Professional or Associate.
- Demonstrated experience implementing secure, scalable AWS architectures following industry best practices and security frameworks.
- Demonstrated federal experience implementing:
- NIST Cybersecurity Framework
- OMB Memorandum M‑22‑09
- NIST SP 800‑53
- Strong understanding of IAM, cloud security, network security design, security operations, security architecture, data loss protection, zero trust, DevSecOps, and vulnerability management.
- Deep analytical, problem‑solving, and troubleshooting experience.
- Ability to work independently with strong attention to detail.
- Proven ability to provide proactive technical security consultation and advisory services.
Duties and Responsibilities (TOR – Complete)
- Conduct regular security reviews of AWS cloud infrastructure deployed by engineering teams.
- Evaluate infrastructure‑as‑code against security standards.
- Review and validate compliance with security policies and best practices.
- Assess adherence to AWS Well‑Architected Framework – Security Pillar.
- Identify and document security misconfigurations and non‑compliant controls.
- Develop and maintain security posture dashboards.
- Create or update security configuration guides and playbooks.
- Implement AWS security controls and services to ensure security hardening.
- Develop and update AWS security configuration standards.
- Conduct security training sessions for engineering teams.
- Present findings and recommendations in team meetings.
- Identify opportunities to automate security assessments.
- Recommend security tooling improvements.
Salary : $100 - $105