What are the responsibilities and job description for the AWS Security Engineer position at Triwave Solutions Inc?
Job Details
3. AWS Security Engineer
The AWS Security Engineer will support UMby ensuring the security of its AWS cloud infrastructure and applications. The resource will design, implement, and maintain security controls, conduct assessments, and provide ongoing monitoring and response. The contractor will collaborate with cross-functional teams to embed security best practices and lead initiatives to strengthen the organization s cloud security posture. This resource reports to the Manager, Information Security.
Responsibilities
Design, implement, and manage AWS cloud security controls (IAM, VPC, S3, KMS, GuardDuty, CloudTrail, Security Hub).
Conduct vulnerability assessments, penetration testing, and risk analyses; recommend and implement mitigations.
Monitor and respond to security events; support incident response and forensic investigations.
Automate security processes and integrate security tools into CI/CD pipelines.
Develop and maintain AWS security policies, procedures, and documentation.
Train engineers on secure coding practices and AWS security standards.
Lead AWS-focused security roadmap projects and ensure compliance with frameworks (e.g., NIST, ISO 27001, ITIL, COBIT).
Collaborate with IT, engineering, and vendors to ensure secure design, deployment, and operations.
Qualifications
Bachelor s degree in Computer Science, Information Security, or related field (or equivalent experience).
3 years AWS security engineering experience with deep knowledge of AWS services (IAM, VPC, KMS, GuardDuty, CloudTrail, Security Hub, etc.).
AWS Security or Architect certifications preferred.
Experience with cloud security principles (network segmentation, IAM, encryption, monitoring).
Proficiency with scripting/automation (Python, PowerShell, etc.).
Strong background in vulnerability management, incident response, and security assessments.
Knowledge of compliance frameworks (PCI, GDPR, GLBA, CMMC, etc.).
Familiarity with secure software development lifecycle, code reviews, and API security.
Strong problem-solving, analytical, and communication skills.
Ability to work independently, lead initiatives, and mentor others when needed.