AWS Cloud Security Engineer
Core
Design, automate, and deploy security and compliance solutions across complex, multi-account AWS environments for customers.
Role type
Senior IC AWS Cloud Security Engineer
Builds
Automated governance, compliance, and security capabilities for customer AWS environments
Domain
Cloud Security / AWS Infrastructure
Required skills
AWS Service Control Policies (SCPs), Resource Control Policies (RCPs), Terraform, AWS Control Tower, Python, IAM Access Analyzer, AWS Organizations, AWS Config, AWS Security Hub, GuardDuty, Macie, CloudTrail, VPC endpoints, S3 policies, KMS policies
Preferred skills
Java, Bash, Jenkins, GitLab, AWS CDK, Vault, Splunk, OWASP
Technologies
Terraform, Python, Java, Bash, AWS CLI, Jenkins, GitLab, Git, CodePipeline, CodeBuild, CodeCommit, CodeDeploy, Vault, Splunk, OWASP, Trend Micro, Palo Alto, Fortify, Twistlock, Aqua Security, Amazon S3, Lambda, EC2, EKS, ECS, ECR, VPC, Route 53, API Gateway, Direct Connect, Control Tower, Organizations, CloudWatch, Auto Scaling, Config, CloudTrail, Service Catalog, Systems Manager, IAM, Inspector, KMS, Secrets Manager, Security Hub, Detective, GuardDuty, Macie, HSM, Certificate Manager
Responsibilities
Advise customers on cloud adoption strategies and provide technical guidance; Design, develop, and deploy security solutions across AWS environments; Author Service Control Policies (SCPs) and Resource Control Policies (RCPs) using Terraform; Implement and deploy policies through AWS Control Tower AFT pipelines; Test policies in sandbox environments and conduct blast radius analysis; Develop VPC endpoint, Amazon S3, and AWS KMS resource-based policies; Apply IAM Access Analyzer and policy evaluation capabilities; Design and implement automated security, compliance, and DevSecOps solutions; Build self-service AWS account frameworks and automated account provisioning pipelines; Design frameworks to collect, transform, and interpret security event data; Implement centralized AWS Security Hub capabilities and configure GuardDuty; Configure Amazon Macie to identify sensitive data; Develop AWS Config rules to enforce security configurations; Enable CloudTrail for API activity monitoring and VPC Flow Logs; Build trusted relationships with customers and serve as a deep technical resource; Collaborate with customer stakeholders to understand challenges and recommend solutions; Develop high-quality technical content, including automation tools, reference architectures, and white papers; Prepare and deliver runbooks, documentation, and knowledge-transfer sessions.
Seniority
Senior, hands-on IC
