Description

You design and implement scalable solutions to identify resource ownership and mitigate security vulnerabilities across AWS infrastructure and applications.

This role is hybrid.

Responsibilities

• Map untagged AWS resources across multiple accounts to application owners using CloudTrail, Config, and tagging strategies.
• Develop scalable solutions to detect and remediate security vulnerabilities, including cloud misconfigurations in CloudFormation and CVEs in hosted code.
• Implement mitigation strategies for security risks across many AWS accounts and regions using IaC pipelines and automation.
• Partner with Governance, Risk, and Compliance (GRC), security, and platform teams to support security vulnerability Service Level Objectives (SLOs).
• Leverage enterprise pipeline, monitoring, and security scanning tools to maintain observability and compliance.

Required Skills

• 5+ years of experience in DevOps and cloud engineering.
• Proficient in AWS security and networking fundamentals, including IAM, KMS, CloudTrail, CloudWatch, ECS, Kubernetes, Lambda, EC2, VPC, S3, DynamoDB, SNS, and SQS.
• Strong knowledge of Infrastructure as Code (IaC) tools such as CloudFormation and Terraform.
• Experience with CI/CD pipeline tools, specifically GitHub.
• Scripting proficiency in Python, Shell, or PowerShell.
• Familiarity with monitoring and observability tools like Splunk.
• Experience using security cloud scanning tools and dashboards such as Wiz or Tableau.

Preferred Skills

• Experience developing ownership attribution models across large-scale AWS environments.
• Background in mitigating security vulnerabilities at scale in multi-account AWS architectures.

Key Skills

Education

Any Graduate