Overview:

Security specialists address cloud security architecture, IAM strategy, proactive preventative and detective security controls, security event and logging, data protection, compliance frameworks, and threat detection.

Total Experience: 12-19 years

Role Requirements:

- 5 years AWS security, 5 years technical security experience, 2 years of consulting experience.

Core Skills:

- Security architecture, security solution engineering.

- Security operations: threat and vulnerability detection, incident response, security and event logging.

- Cloud security solutions implementation.

- Infrastructure as code (Terraform, CloudFormation, CDK), DevOps, AI Agentic frameworks.

- Compliance: PCI DSS, ISO 27001, HIPAA, NIST DoD.

- IAM, Key Management, Encryption, Network security (WAF, Shield, Security Groups).

Key Responsibilities:

- Security Architecture and Design.

- Building and deploying security capabilities in code.

- Enterprise security solutions: SSO, Federation, WAF, Firewalls, Databases, Serverless, Container, and SIEM.

- Deliver security assessments and Security EPICs Accelerator engagements.

- Apply security frameworks (NIST, ISO, CIS) to customer environments.

- Provide expertise in AWS Security Services and cloud security best practices.

Required Certifications:

- AWS Certified Security Specialty (Active).

Role Expectations:

- Deliver complex security and enterprise risk management solutions from design through implementation.

- Report into the AWS Pro Serve Security or Engagement Management Lead.

- Provide weekly status reports and document security decisions.

- Test all deliverables in a non-production environment.

- Comply with Pro Serve Provider Security Policies.

Detective Controls Monitoring:

- Establish continuous visibility using AWS Config, Guard Duty, Security Hub, CloudTrail, CloudWatch, Macie, and VPC Flow Logs.

Encryption Data Protection:

- Protect data at rest and in transit using KMS, ACM, S3 bucket policies, and IAM Access Analyzer.