We are seeking an experienced AWS Security Engineer to join our team and ensure the security and compliance of our cloud infrastructure and applications hosted on Amazon Web Services (AWS). The ideal candidate will have a deep understanding of AWS security services, best practices, and a strong background in cloud security operations.
Responsibilities:
- Incident Analysis: Specialize in advanced incident analysis, qualification, and root cause investigation.
- AWS Security Monitoring: Monitor AWS security console for Level 3 event analysis via SIEM tools.
- Threat Mitigation: Lead triage of advanced attacks like botnets and APTs with expert resolution.
- Incident Collaboration: Advise asset and response plan owners during high-severity incidents.
- Containment Leadership: Direct Level 3 strategies to mitigate data breaches and loss impacts.
- Mentorship: Provide mentoring and documentation to enhance AWS incident management capabilities.
- Secure Configurations: Define/enforce secure AWS baselines for authentication and encryption.
- Security Engineering: Manage patching, controls, automation, and threat mitigation in AWS.
- Security Projects: Lead AWS security projects involving reviews, tools, and new practices.
- MSP Coordination: Work with MSP/AMS to resolve security issues promptly.
- Security Reporting: Generate monthly AWS security reports highlighting risks and improvements.
- Compliance Monitoring: Ensure AWS compliance with standards like PCI DSS and NIST.
- Risk Assessment: Conduct AWS cyber risk and vulnerability assessments to prioritize threats.
- Policy Development: Develop/maintain AWS security policies aligned with best practices.
- Architecture Review: Assess AWS architectures for alignment with security requirements.
