← All jobs
Job Description Responsibilities The AWS Security Engineer is responsible for ensuring the security, compliance and protection of our cloud-based infrastructure. The ideal candidate will have hands-on experience with AWS security services, cloud risk assessments, incident response and continuous security monitoring. This role partners with Cloud Engineering, DevOps and Application teams to maintain a secure and resilient cloud environment. Day to Day Work Responsibilities: Lead and support vulnerability scanning and remediation efforts for cloud resources Strong understanding of IAM Roles/Policies and Identity Federation, Encryption, KMS, secrets management Provision and manage AWS infrastructure using infrastructure as code (IaC) using tools such as Terraform Write custom scripts for CloudWatch custom metrics and alarms based on application specific probes Implement alerting and remediation automation based on probe output Assist in incident response, investigation and root cause analysis of cloud security events. Develop and maintain security architecture documentation, runbooks and procedure documents Run AWS security posture assessments using automated tools Experience with AWS cloud security monitoring and detection tooling Contribute to best practices around DevOps, automation and deployments and work with teams to embed security best practices into CI/CD pipelines and infrastructure as code Implement and improve AWS security controls, guardrails and baseline configurations Continuously evaluate AWS environments for cost-effective security improvements Conduct threat modeling, vulnerability analysis and remediation coordination Support internal and external audits by gathering evidence, validating configurations and preparing documentation Maintain cloud compliance requirements, NIST, FISMA and FedRAMP Assist in risk assessments and security control testing Support change control and documentation to reflect accurate system and process ownership Evaluate merging cloud security tools and recommend security enhancements Keep cloud environments compliant with security standards and best practices Participate in on-call rotations to support 24/7 production systems and respond to incidents as they arise