Jobs → Engineering → AWS Security Engineer

About the Role Our client is transitioning from a data center to AWS, requiring an AWS Security Engineer to manage network security during the migration of 360 servers and 650 TB of storage. The role involves designing and implementing security measures for each workload and supporting the rollout of a new Cloud-Native Application Protection Platform (CNAPP). Key Responsibilities • Design, build, and test AWS Security Groups for each wave of migrating workloads • Maintain narrow inbound and outbound rules, avoiding default security groups • Separate application tiers by assigning unique security groups to web servers, app servers, and databases • Control security group changes through IAM policies and log them in AWS CloudTrail • Monitor network traffic and set up AWS Inspector for ongoing vulnerability scanning • Support CNAPP rollout, including posture management (CSPM) and runtime protection for VMs and containers (CWPP) • Collaborate with migration partners and internal teams using Jira and Confluence Requirements • 5+ years in cloud or network security, with at least 3 years in AWS • Experience designing security groups and NACLs for large migrations or data center exits • Strong understanding of VPC networking, segmentation, and least privilege • Working knowledge of AWS IAM, CloudTrail, Inspector, Security Hub, and GuardDuty • Experience with at least one CNAPP or CSPM platform • Comfortable managing security groups as code with Terraform • Ability to work alongside external partners and maintain pace with migration schedules