AWS Security Manager

Peraton•,

4d•$86,000 - $138,000

About The Position

Peraton is seeking an experienced AWS Security Manager to lead the strategy, execution, and continuous improvement of its cloud security program. The role is responsible for protecting AWS infrastructure and ensuring its security and compliance, in partnership with Cloud Engineering, DevOps, GRC, Audit, and Application teams. The position combines hands-on technical expertise and team leadership with knowledge of AWS security services, automation, cloud risk assessments, and incident response. The manager also supports security for 24/7 production systems through on-call rotations.

Requirements

At least 6 years of experience; lead experience may be included.
At least 6 years of experience in cloud security or cybersecurity.
Proven experience managing or leading security engineering teams.
Strong understanding of AWS security controls, including identity, logging, and encryption.
Expert knowledge of AWS IAM, KMS, encryption, CloudTrail, CloudWatch, and AWS security services.
Advanced hands-on Terraform experience, including writing and reviewing modules.
Experience building and maintaining AWS Lambda functions.
Ability to interpret access logs, configurations, and IAM policies.
Experience securing large, multi-account AWS environments.
Must be a U.S. citizen.
Must be able to obtain and maintain the required Agency clearance.

Nice To Haves

Bachelor's or master's degree.
AWS certifications, such as Cloud Practitioner or Security Specialty.
Security compliance or audit certifications.
Experience with container security, including EKS or ECS.
Python or Bash scripting experience for automation.

Responsibilities

Lead, mentor, and develop security engineers focused on AWS hardening, Terraform automation, CI/CD security, monitoring, and incident response.
Establish enterprise-wide AWS security standards, policies, and best practices.
Oversee IAM strategy, including roles, policies, identity federation, and least-privilege enforcement.
Guide engineers on AWS Lambda development, serverless architecture, secure coding, and scalable deployments.
Manage deployment and configuration of AWS security tools, including Security Hub, GuardDuty, Config and Config Rules, KMS, and VPC security controls.
Collaborate with DevOps teams to embed security into CI/CD pipelines and Infrastructure as Code workflows.
Enforce controls for logging, encryption, segmentation, patching, and vulnerability management.
Drive automation for drift detection, patching, remediation, and compliance reporting.
Oversee detection and response activities for AWS security events.
Lead threat investigations, root-cause analysis, and remediation plans.
Maintain and improve security runbooks, tabletop exercises, and escalation procedures.
Evaluate AWS environments to identify cost-effective security enhancements.
Manage the AWS risk register, security assessments, internal controls, and compliance workflows.
Ensure audit readiness for SA&A, NIST, FISMA, and FedRAMP.
Coordinate evidence gathering, control testing, gap remediation, and auditor engagement.
Conduct configuration reviews, vulnerability scans, and compliance checks.
Review and approve new AWS architectures from a security perspective.
Train and promote secure cloud practices with engineering and development teams.
Report security risks, KPIs, and metrics to senior leadership.
Participate in on-call rotations supporting 24/7 production systems and incident response.

Benefits

Medical benefits.
Dental insurance.
Vision insurance.
Life insurance.
Health savings account.
Short- and long-term disability.
Employee assistance program (EAP).
Parental leave.
401(k).
Paid time off for vacation.
Company-paid holidays.
Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus.