This role is a hands-on cloud and application security engineering position focused on modernizing and operating AWS WAF, API security, and application security posture at scale. The work emphasizes automation, policy as code, AI-assisted analysis, and operational execution, with minimal emphasis on leadership or executive engagement.

The contractor will design, build, tune, and operate AWS WAF and API security capabilities, migrate WAF policy management to GitHub based CI/CD, enhance visibility through AWS Security Lake, and automate remediation workflows to reduce manual effort and improve detection fidelity.

• Implement, operate, and tune AWS WAF, Firewall Manager, Shield Advanced, and related AWS security services.


• Migrate and maintain AWS WAF policies as code using GitHub SaaS, including CI/CD workflows, versioning, testing, and rollback...