Senior Cloud Security Engineer

Що робити

Security architecture: multi-account AWS Organizations setup with an organization-wide CloudTrail and log archive, delegated GuardDuty, Security Hub and Config, and service control policies.
Detection and response: threat detection and high-risk change alerting across all accounts and regions; alert triage, the security on-call and incident response.
Vulnerability management: Security Hub, Inspector and SonarQube findings routed to tickets, a weekly review, and patch plans agreed with DevOps.
Identity and access: short-lived, role-based credentials for people and automation; privileged access reviews across IAM Identity Center and Keycloak; Keycloak hardening.
Resilience: incident runbooks, tabletop exercises and tested backup restores, including ransomware scenarios.

6+ years in security or infrastructure engineering, with at least 3 years hands-on securing production AWS environments.
You work autonomously: you set priorities, make the call and see it through.
Deep AWS security: IAM and Organizations (SCPs, Identity Center, cross-account roles), CloudTrail, GuardDuty, Security Hub, Config, Inspector, KMS, Secrets Manager, VPC and network controls.
Infrastructure as code: you write and review production Terraform.
Scripting in Python or Bash for automation and investigations.

Hands-on use of AI coding agents (Claude Code or similar) for security engineering, and an understanding of prompt-injection risks.
Claude Certified Developer or Architect, or a similar AI coding certification.
AWS Certified Security – Specialty, or OSCP, GCIH, CISSP.
Application security: OWASP Top 10, SAST/DAST, working with external penetration testers.
Java application stacks, PostgreSQL, Oracle or Redshift.

Знайдено через trackr.help/jobs · Канал: @trackrhelp · Бот для персональних сповіщень: @trackrhelpBot