Loading...
Mid LevelFull-timePythonRustAWSTerraformCI/CDGo
Salary Range
$102,000 - $138,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
Key Responsibilities
- →Enhance Cloud Security: Manage and improve AWS security, including IAM, network segmentation, key management, and logging.
- →Strengthen Detection & Telemetry: Configure and maintain SIEM, vulnerability scanners, IDS/IPS, and endpoint protection tooling.
- →Improve Monitoring: Build alerting for critical systems and embed security into CI/CD workflows.
- →Ensure Compliance: Harden infrastructure and support adherence to ISO 27001, PCI DSS, DORA, and other relevant standards.
- →Support Audit Readiness: Prepare regulatory reports, coordinate audit evidence, and assist with inspections.
- →Lead Incident Response: Operate and tune SIEM, investigate alerts, and run incident triage and post-incident reviews.
- →Maintain Playbooks: Improve vulnerability, incident, and threat intelligence procedures; strengthen first-line detection.
- →Align with Stakeholders: Work closely with Risk, Compliance, and IT to provide metrics and support executive reporting.
- →Guide Third-Party Reviews: Coordinate cross-entity policy alignment and advise on vendor compliance.
Requirements
- ✓5+ years in Security Engineering in AWS environments
- ✓Deep understanding of AWS security services including IAM, KMS, CloudHSM, Security Hub, and CloudTrail
- ✓Hands-on experience with SIEM platforms and integrating cloud or endpoint telemetry
- ✓Strong knowledge of vulnerability management, incident response, and security monitoring
- ✓Familiarity with compliance frameworks such as DORA, PCI DSS, ISO 27001, NIST CSF
- ✓Experience preparing security reports and audit evidence for regulators or auditors
- ✓Skilled in Infrastructure-as-Code (Terraform) and integrating security into CI/CD
- ✓Competent in scripting and automation (Python, Bash, etc.) for detection, response, and reporting
- ✓Strong ownership and ability to work independently across engineering and compliance teams
- ✓Excellent communication skills for both technical and non-technical audiences.
