Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
BizFirst LLC

Cloud Security Engineer

BizFirst LLC

. Secure AWS environments hosting CBP mission applications .

Posted 9/29/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing AWS environments and implementing cloud security controls, with a strong focus on vulnerability management, incident response, and compliance with NIST and DHS standards. Proficient in automating security processes and advising on security best practices for cloud architectures.

Highest-signal resume keywords
AWS Security ManagementNIST SP 800-53 ComplianceVulnerability Scanning ToolsPython ScriptingCISSP Certification

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
AWS IAMVPC SecurityKMSContainer SecurityKubernetesInfrastructure as CodeTerraformCloud Security AutomationSecurity Incident ResponseRoot Cause Analysis
Tools & Technologies
SplunkTenableNessusQualysPrisma Cloud
Certifications & Qualifications
CISSPCCSPAWS Certified Security Specialty
Industry Keywords
Authority to OperateContinuous MonitoringZero Trust ArchitectureDISA STIGsCIS BenchmarksDHS 4300AContinuous Diagnostics and MitigationFedRAMPAWS GovCloudCBP Public Trust

Tech Stack

Tools & technologies
AWSCloudCyber SecurityKubernetesPythonSplunkTerraform

About the role

Key responsibilities & impact
  • Secure AWS environments hosting CBP mission applications
  • Implement and operate cloud security controls
  • Build security checks into delivery pipelines
  • Manage vulnerabilities and track findings through remediation via POA&Ms
  • Support Authority to Operate (ATO) and continuous monitoring processes
  • Map controls to NIST SP 800-53 and DHS 4300A, gather evidence, and update system security plans
  • Harden systems, containers, and Kubernetes clusters to DISA STIGs and CIS Benchmarks
  • Support zero trust architecture through identity-based access, micro-segmentation, and least privilege
  • Detect and respond to security events using SIEM tools such as Splunk
  • Support incident response and root cause analysis
  • Automate security checks and remediation with Python, AWS Lambda, or policy as code
  • Review cloud architectures and changes for security risk
  • Advise platform engineers, developers, and CBP security staff

Requirements

What you’ll need
  • U.S. citizenship
  • Able to obtain and maintain a CBP Public Trust background investigation
  • At least seven (7) years of experience in cybersecurity, cloud, or systems engineering, including at least three (3) years securing AWS environments
  • Hands-on experience with AWS IAM, VPC security, KMS, and AWS native security services
  • Working knowledge of NIST SP 800-53, the Risk Management Framework (RMF), and federal ATO processes
  • Experience with vulnerability scanning tools (Tenable/Nessus, Qualys, or Prisma Cloud) and SIEM platforms such as Splunk
  • Experience securing containers and Kubernetes
  • Scripting in Python or Bash; infrastructure as code with Terraform
  • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field
  • Able to work remotely on East Coast hours and travel approximately once per quarter
  • CISSP, CCSP, or AWS Certified Security Specialty
  • Experience with DHS 4300A, Continuous Diagnostics and Mitigation (CDM), and FedRAMP
  • Experience with AWS GovCloud (US)
  • Experience supporting DHS or CBP systems
  • A current DHS Public Trust (CBP, ICE, USCIS, CISA, or another DHS component)

Benefits

Comp & perks
  • Remote work arrangement
  • East Coast working hours
  • Travel approximately once per quarter
  • Immediate start following favorable suitability determination and customer onboarding