Source Job

US

  • Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
  • Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
  • Prepare security compliance reports and execute Security Controls Test plans for ATO requests.

AWS Cloud Security FedRAMP NIST

20 jobs similar to AWS Assessor

Jobs ranked by similarity.

$104,000–$166,000/yr
US

  • Administer and maintain all AWS cloud environments for the WARP permitting platform, ensuring availability, performance, and security.
  • Manage AWS Marketplace subscriptions, monitor environment health with CloudWatch, and coordinate with AWS support.
  • Enforce security controls, manage user access, and maintain FedRAMP, FISMA, and NIST compliance.

Peraton is a next-generation national security company delivering mission-critical solutions to protect the nation and allies. It is a large enterprise serving government agencies and the U.S. armed forces, with employees solving the most daunting challenges for customers.

US

  • Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
  • Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
  • Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.

Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.

$159,000–$210,500/yr
US Unlimited PTO

  • Lead cloud security architecture and posture management across large multi-subscription Azure and AWS environments.
  • Design policy-as-code guardrails and automated controls to prevent misconfigured infrastructure from reaching production.
  • Partner with engineering teams to integrate security into CI/CD, threat modeling, and vulnerability management.

HealthEquity empowers healthcare consumers by providing health savings accounts and related financial solutions. They are a large, mission-driven company focused on connecting health and wealth, with a culture that values belonging and innovation.

$157,000–$262,000/yr
US Unlimited PTO

  • Lead cloud architecture engagements from discovery through delivery for Azure, AWS, and Google Cloud.
  • Design secure landing zones, hybrid solutions, and compliance-aligned architecture for regulated clients.
  • Mentor a team of architects and engineers while supporting pre-sales and technical strategy.

Aprio is a Top 20 CPA and advisory firm that brings together proven expertise, deep understanding, and strategic foresight for fast-growing industries. With 40 U.S. offices and over 3,200 team members speaking 60+ languages, it offers a top-rated culture and vast growth opportunities.

US Unlimited PTO 12w maternity 12w paternity

  • Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
  • Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
  • Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.

Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.

US

  • Improve cloud security posture through practical, scalable policy engineering.
  • Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
  • Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.

UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.

$87,500–$95,000/yr
US

  • Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
  • Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
  • Perform technical tests, document results, and maintain work papers.

Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.

$155,000–$170,000/yr
US Unlimited PTO

  • Own and drive the SOC 2 compliance program, including annual audits and certification.
  • Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
  • Lead customer security reviews and respond to complex security questionnaires.

Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.

US

  • Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
  • Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
  • Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.

SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.

US

  • Act as the subject matter expert for Wiz's FedRAMP and DoD IL4/5 offerings, translating product value to internal and external stakeholders.
  • Engage with federal customers and mission owners to capture requirements, manage expectations, and support compliance processes.
  • Partner with Product and PMM to maintain the Wiz4Gov roadmap and prioritize features essential for U.S. Public Sector compliance.

Wiz is a cloud security company that connects code, cloud, and runtime into a single context to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and offers a culture that values world-class talent and creative freedom.

$150,000–$175,000/yr
US Unlimited PTO

  • Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
  • Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
  • Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.

symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.

US

  • Build and maintain AWS GovCloud infrastructure including ECS/Fargate, DynamoDB, S3, VPC, IAM, and CloudWatch using Terraform.
  • Design and run CI/CD pipelines for container builds, vulnerability scanning, and deployment with release versioning.
  • Implement tamper-evident storage, monitoring, alerting, and incident response to support ATO and federal security requirements.

Broadway Ventures is a Service-Disabled Veteran-Owned Small Business and HUBZone federal contractor providing program management, technology, and consulting solutions to government and private clients. As a small business, it emphasizes integrity, collaboration, and tailored innovation as a trusted partner.

US

  • Collaborate with Development and Architecture teams to build complex, highly available cloud environments.
  • Provide Level 3 technical support and act as SME for implementing infrastructure for our core product.
  • Design and maintain secure, scalable infrastructure while documenting best practices and performing root cause analysis.

Smile Digital Health provides a FHIR-based data liberation platform that helps healthcare stakeholders collect and exchange data, impacting patients in over 20 countries. The company ranked #19 on Deloitte's Technology Fast 50 for 2024 and fosters a culture of respect, inclusion, and authenticity.

$200,000–$250,000/yr
North America

  • Design and build security guardrails, automation, and detection across AWS, GCP, and Azure.
  • Secure IaC, CI/CD pipelines, and software supply chain with policy as code and least-privilege IAM.
  • Partner with platform, infrastructure, and compliance teams to drive security findings to remediation.

Tessera Labs is a technology company focused on securing cloud infrastructure across AWS, GCP, and Azure. The culture emphasizes a DevOps mindset, automation, and close collaboration with engineering and compliance teams.

  • Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
  • Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
  • Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.

Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.

Global

  • Design and maintain security controls across AWS and GCP infrastructure and platform services.
  • Manage IAM, network segmentation, encryption, key management, monitoring, threat detection, and incident response.
  • Own SC TRM and BNM RMiT controls for cloud and infrastructure, including audit and remediation support.

BJAK is a mobile-first insurance platform and the leading insurance platform in Southeast Asia, helping people plan, save, and grow their money. With over 20 nationalities working globally, the team values passionate, driven people who love building next-generation financial applications.

Australia

  • Lead technical implementations and architectural guidance for cloud security solutions.
  • Deploy Cloud Security Posture Management and Cloud Workload Protection capabilities.
  • Collaborate with customers to accelerate adoption and deliver measurable security outcomes.

This consulting company helps enterprise clients strengthen their cloud security posture and protect critical workloads. They offer a dynamic, customer-facing environment with opportunities for professional development and training.

US

  • Provide SA/OSA expertise and guidance for the security authorization program.
  • Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
  • Track authorization renewals and support audits and data collection for FISMA reporting.

SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.

Europe

  • Provide security support for infrastructure and end-user systems, including macOS endpoints and cloud environments.
  • Manage AI governance, vulnerability management, and endpoint security across a global remote team.
  • Handle vendor security assessments, audit observations, and third-party app reviews.

Gurobi Optimization empowers customers to expand their use of mathematical optimization technology for smarter decision-making. They are a small company with employees across 16 countries, fostering a collaborative and innovative culture.

$140,000–$160,000/yr
US

  • Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
  • Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
  • Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.