Drive continuous security improvements in AWS based on SIP findings.
Maintain “100% Green” status in AWS Trusted Advisor and Security Hub.
Own IAM security, enforcing MFA, auditing admin access, rotating keys, and implementing least-privilege roles.
Manage temporary privileged access workflows to ensure secure, time-bound access.
Lead the lifecycle of infrastructure security findings, from triage to remediation and verification.
Build and operate centralized logging and SIEM for full visibility and threat response.
Collaborate with DevOps/SRE teams to embed security into provisioning and deployments.
Coordinate AWS security assessments and penetration testing, driving remediation.
Provide security guidance for architecture and new services, ensuring best-practice implementation.

7+ years in Infrastructure Security, Cloud Security, or Cloud Engineering roles.
Deep expertise in AWS security services (IAM, VPC, Control Tower, Security Groups, GuardDuty, Config, KMS, WAF).
Hands-on with Infrastructure-as-Code security (Terraform, CloudFormation) and CI/CD pipeline hardening.
Solid understanding of AWS network architecture and secure networking practices.
Skilled in monitoring, logging, and incident response in cloud environments.
Knowledge of cloud compliance frameworks (ISO 27001, SOC 2, CIS Benchmarks).
Experienced in threat modeling, vulnerability management, and remediation.
Practical implementation of zero-trust and least-privilege principles.
Conduct security reviews of architecture and configurations.

Generous Time Off – Take the breaks you need to relax, recharge, and come back inspired.
Top-Tier Tech – Love Mac? So do we! We equip our team with the best tools for success.
Career Growth & Development – We cover certifications and IT conferences to keep you at the top of your game.
Well-being Support – We offer access to psychology sessions to support your mental and emotional health.

Infrastructure Security Engineer

Key skills