AWS Security Engineer - Web Application Firewall (5-7 yrs)

Job Description :

We are seeking an experienced AWS Cloud Security Engineer to join our dynamic team. The ideal candidate will have 5+ years of expertise in AWS cloud security, including the design, implementation, and management of security services within AWS environments. This role requires deep knowledge of AWS security services, cloud networking, and industry-leading security practices to ensure a secure, scalable, and compliant cloud infrastructure.

Key Responsibilities :

- Implement and manage AWS Cloud Security Services such as WAF (Web Application Firewall), API Gateway, AWS Control Tower, Security Hub, and AWS Trusted Advisor to ensure security compliance and protection against threats.

- Design, configure, and monitor cloud networking components such as VPN, VPC, subnets, route tables, and other related networking services to maintain secure, efficient, and scalable network architectures.

- Enforce security best practices and standards within AWS environments, ensuring all deployments follow the industry's leading security practices for cloud infrastructure.

- Implement and manage security controls around cloud services such as Container Scanning and Software Composition Analysis (SCA) to ensure vulnerability management and risk mitigation.

- Continuously monitor and assess AWS environments for security risks, and implement strategies to proactively address vulnerabilities, misconfigurations, and potential threats.

- Lead and support the implementation of Identity and Access Management (IAM) policies, roles, and permissions to protect cloud resources and data.

- Integrate security automation tools into CI/CD pipelines to enforce security controls during development and deployment.

- Work closely with internal teams to advise on security aspects related to cloud networking, cloud-native services, and security configuration.

Required Skills & Experience :

- Minimum of 5+ years of experience in AWS Cloud Security, with a focus on securing cloud infrastructure and services.

- Deep expertise in AWS Security Services, including WAF (Web Application Firewall), API Gateway, AWS Control Tower, AWS Security Hub, and AWS Trusted Advisor.

- Strong understanding and hands-on experience with cloud networking components, such as VPN, VPC, subnets, route tables, and network security within AWS.

- Experience with implementing Security Best Practices for AWS environments, including secure network architecture, IAM policies, and resource protection.

- Practical experience with Container Security including Container Scanning and SCA (Software Composition Analysis).

- Strong knowledge of AWS Identity and Access Management (IAM), roles, and permissions for secure access control.

- Experience with cloud security automation and integrating security into CI/CD pipelines.

- Familiarity with regulatory standards and frameworks (e.g., GDPR, HIPAA, SOC 2) and how they apply to AWS cloud security.

- Familiarity with security monitoring tools like AWS CloudWatch, CloudTrail, and third-party tools such as Dynatrace or Splunk.

- AWS Certifications (AWS Certified Solutions Architect, AWS Certified Security ) are a plus.