Senior Cloud & Application Security Engineer
First seen by Alion on Oct 15, 2026.
Position Overview :
We are seeking an experienced Senior Cloud & Application Security Engineer to join our Cybersecurity team. In this role, you will play a critical part in protecting our cloud infrastructure, network architectures, and software applications. You will be responsible for end-to-end application security testing, threat detection, network-level troubleshooting, and cloud security governance across AWS and multi-cloud environments.
Required Qualifications & Technical Skills :
- Application Security: Hands-on experience with Veracode (SAST/DAST/SCA), Qualys TotalAppSec, Burp Suite, ZAP, Nessus, OpenVAS, and Nmap.
- AWS Security Infrastructure: Deep understanding of AWS networking/security services (VPC, Site-to-Site VPN, GuardDuty, Macie, Config, SecurityHub, Inspector, IAM, S3, KMS, Secrets Manager, Certificate Manager).
- Network & Packet Troubleshooting: Expertise in network components (NAT, Bastion, Security Groups, ACLs, CloudTrail) and deep packet analysis via Wireshark / tcpdump.
- WAF & Edge Security: Expertise with AWS WAF, Cloudflare WAF, Bot Management, and Rate Limiting.
- SecOps & Endpoint Security: Operational knowledge of SIEM, EDR, and Malware Protection configuration and threat monitoring.
- Automation: Proficiency in Python for security scripting, API integrations, and reporting.
Preferred Certifications :
- AWS Certified Security Specialty (Highly Preferred)
- CompTIA Security+
- Certified Ethical Hacker (CEH)
- Equivalent certifications such as CISSP, OSCP, or GIAC (GSEC/GCIH) are a plus.
Key Responsibilities :
1. Application & Software Security (AppSec) :
- Implement, manage, and optimize Veracode platform capabilities, including SAST, DAST, and Software Composition Analysis (SCA).
- Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.
- Perform manual and automated application vulnerability analysis and penetration testing using tools such as Burp Suite, OWASP ZAP, Nessus, OpenVAS, and Nmap.
- Manage Edge and Layer 7 security using AWS WAF and Cloudflare WAF, defining and maintaining rate-limiting rules, bot management policies, and custom firewall configurations.
2. Cloud & Network Security Architecture :
- Design, configure, and manage secure AWS network architectures involving VPCs, Security Groups, Network ACLs, NAT Gateways, Bastion Hosts, and Site-to-Site VPNs.
- Administer AWS security governance, monitoring, and compliance tooling, including Security Hub, GuardDuty, Macie, Config, Inspector, and CloudTrail.
- Implement and audit identity and data protection standards using AWS IAM, S3, KMS, Secrets Manager, and AWS Certificate Manager (ACM).
- Configure network-level logging, analyze network traffic, and troubleshoot complex routing or security issues.
- Perform dynamic packet analysis using Wireshark, tcpdump, and packet inspection tools to diagnose complex network/security anomalies.
3. Security Operations & Automation :
- Maintain operational visibility into Malware Protection, SIEM, and Endpoint Detection and Response (EDR) platforms (configuration, monitoring, and incident investigation).
- Develop continuous automation scripts in Python to streamline repetitive security operations, automate report generation, and integrate security workflows.
Skills
Security, AWS, Python, WIRESHARK, Applications Security, Cloud Security, Cloud, IT Security Strategy, Cyber Security