AWS Senior Security Engineer

Responsibilities:
• Ensure seamless log ingestion from AWS cloud infrastructure (CloudTrail, VPC Flow Logs, Amazon GuardDuty) to the Hybrid SIEM platform (Splunk) in near real-time via Splunk Forwarder configuration.
• Perform automated checks and mitigation of control drift between security policies/configurations in AWS and on-premises environments to ensure no security gaps arise due to duplicate environments.
• Be responsible for the availability, performance, and technical architecture of cloud security components, and ensure that automated alerts are triggered in the event of performance degradation in the security stack.
• Verify asset readiness, IAM account mapping, and distributed telemetry management to ensure they are optimally monitored by the 24x7 SOC operations team.
• Collaborate with the AWS Migration Team, Infrastructure Team, and SOAR Engineers to design an environment-aware automated response architecture (such as EC2 isolation automation, Security Group modifications, and global block synchronization on AWS WAF)

Certifications:
• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Professional / Associate
• Certified Information Systems Security Professional (CISSP)
• GIAC Cloud Security Automation (GCSA) or GIAC Certified Cloud Security Officer (GCCSO)
• Certified Cloud Security Professional (CCSP)