AWS Cloud Security Engineer
- Source: Naukri
- Cloudxtreme
- $15,877.22 to $31,754.43 /yr
- Hybrid
- Bengaluru
- Full-Time
- Mid level
Job Description
Domain Expertise
- AWS Organizational Governance: Service Control Policies (SCP) design, multi-account patterns, delegated admin setups.
- Logging & Audit Foundations: Org CloudTrail, AWS Config aggregator, S3 log archive hardening, GuardDuty, Security Hub.
- CSPM / CNAPP Operations(Wiz.io): Onboarding accounts/resources, tuning posture policies, integrating with ticketing and log routing (e.g., Cribl/SIEM).
- Infrastructure as Code: Terraform modules, reusable patterns, policy-as-code integration, CI scanning.
- Vulnerability & Risk Prioritization: Combining CVSS, exploit context, asset criticality, and signal sources into severity logic.
- Automation & Scripting: Python (boto3), AWS CLI, shell tooling for validation, evidence export, reporting.
- Identity & Access: IAM least privilege, cross-account role assumptions, permission boundaries, automation roles.
- Observability / Data Routing (Plus): Cribl / Firehose / Kinesis or equivalent pipeline familiarity.
- Compliance Awareness: HIPAA safeguard themes (auditability, access control, data protection, etc).
- Metrics & Reporting: Designing & extracting KPIs (coverage %, MTTR, SLA compliance, control efficacy)
Skills
- amazon-web-services
- aws-cloudtrail
- aws-config
- amazon-s3
- amazon-guardduty
- aws-security-hub
- wiz
- wizio
- cribl
- Terraform
- Python
- aws-cli
