Location: Washington, DC or San Antonio, TX (Hybrid – 1 day onsite per week)
Clearance: Public Trust clearance required or higher

Blue Rose Consulting Group is seeking a Cloud Security Remediator to support a federal program focused on improving cloud security posture within AWS environments. This role will focus on identifying and remediating cloud security findings, developing infrastructure-as-code solutions using Terraform, and building automation using Python and AWS Lambda to remediate security issues.

This position is ideal for junior cloud security or DevSecOps engineers with AWS experience who are interested in cloud security operations and automation.

• Identify and remediate cloud security findings across AWS environments.

• Develop and maintain Terraform scripts used to manage and remediate cloud infrastructure configurations.

• Update existing Terraform code and create new scripts to address security findings.

• Develop Python-based AWS Lambda functions to automatically detect and remediate cloud security issues.

• Support automation efforts that trigger remediation workflows in response to security alerts.

• Work with cloud engineering and security teams to resolve vulnerabilities and configuration issues.

• Assist with remediation of operating system vulnerabilities in Linux (RHEL) and Windows environments.

• Support vulnerability management, patching, and remediation activities across cloud-hosted systems.

• Document remediation processes and contribute to improvements in the organization’s cloud security posture.

• 2–3 years of experience working with AWS environments

• Experience remediating cloud security findings or vulnerabilities

• Experience working with Terraform, including creating or modifying infrastructure scripts

• Experience writing Python code or functions

• Understanding of cloud security best practices

• Ability to analyze security findings and implement remediation solutions

• Experience developing AWS Lambda functions

• Familiarity with AWS security tools such as Security Hub, GuardDuty, or similar platforms

• Experience with patching and vulnerability remediation

• Knowledge of Windows Domain Administration

• Experience remediating RHEL or Windows OS vulnerabilities

• Exposure to DevSecOps or cloud security operations

Hybrid role with 1 day onsite per week.

Candidates must be located near one of the following locations:

• Washington, DC

• San Antonio, TX