Specialist - CyberSecurity

Specialist - CyberSecurity

AWS Cloud Security Engineer OpsSecAWS

Job Scoperesponsibilities

Should have good handson knowledge on cloud security native services like AWS Identity and Access Management IAM AWS security group AWS Firewall Manager Amazon GuardDuty Amazon Inspector Amazon Macie AWS Network Firewall AWS Secrets Manager AWS Security Hub AWS Shield Amazon Verified Permissions AWS WAF

Analyzing the current cloud security policies and providing recommendations to improve the security of the cloud environment

Having experience to provide the best security practice and creating SOP for the AWS service inscope item and RCA for the P1P2 incident

Monitor and remediate security issues on AWS cloud environment for the customer accountsubscription Handle the activity individually or along with the support team Experience in AWS security resource maintenance monitoring and issue troubleshooting

Work with stakeholders mentoring and providing technological guidance on cloud security incident and remediation

Having knowledge and to follow all the ITIL process incident management and resolution of the incident process Having good experience in any ticketing tool like ServiceNow

Supports implement incident solution and standard configuration and change management processes and best practices

Identify opportunities for further enhancements and refinements to security standards and processes

Main scope of support and maintaining of AWS security group as below

oAdminister EC2 Security Groups including inbound and outbound rule creation modification validation and removal based on approved requests and change records

oSupport access request implementation security group association and disassociation dependency review and connectivity validation for applications and infrastructure workloads

oTroubleshoot connectivity issues blocked traffic incorrect rules exposure risks and security grouprelated incidents impacting service access

oReview security group rules for compliance with approved security policies leastprivilege access audit requirements and operational standards

oIdentify stale unused overly permissive or duplicate rules and recommend cleanup remediation and access control improvement actions

oSupport periodic security group recertification activities access reviews and validation of business justification for existing network access rules

oMaintain security group inventory ownership mapping documentation and configuration records to support operational governance

oProvide audit evidence compliance reporting inputs incident investigation assistance risk tracking and recommendations to reduce security exposure and improve governance