Cloud Security & Compliance Engineer

Job Summary

Cloud Security & Compliance Engineer

Key Responsibilities

• Monitor and manage core AWS services including

  EC2, RDS, IAM, S3, ELB, VPC, CloudWatch, CloudTrail, and SNS

  .
• Implement and maintain AWS-native security tools, including

  AWS WAF, Network Firewall, Security Hub, AWS Config, GuardDuty, Inspector, VPC Flow Logs, KMS, Systems Manager, and Secrets Manager

  .
• Deploy and integrate

  SIEM and observability tools

  (e.g.,

  Splunk, Graylog, Datadog

  ) for

  log aggregation, threat detection

  , and

  security dashboards

  .
• Ensure adherence to security and compliance standards, including

  PCI-DSS, SAR, ISO/IEC 27001:2022

  , and other applicable frameworks.
• Conduct

  vulnerability assessments, compliance audits, and automated security scans

  .
• Drive

  incident response

  efforts, including root cause analysis and implementing remediation strategies.
• Collaborate with

  Engineering, DevOps, and Business teams

  to embed security across infrastructure and CI/CD pipelines.
• Maintain detailed and up-to-date

  security documentation, SOPs, and audit logs

  for internal and external compliance.

Required Skills & Experience

• 24 years of hands-on experience in

  AWS infrastructure and security engineering

  .
• Strong technical expertise in

  AWS core services

  : EC2, RDS, IAM, S3, ELB, VPC, CloudWatch, CloudTrail, SNS.
• Proficient with

  AWS security services

  : WAF, Network Firewall, Security Hub, Config, GuardDuty, Inspector, KMS, SSM, Secrets Manager.
• Experience with

  SIEM/monitoring tools

  : Splunk, Graylog, Datadog.
• Familiarity with

  compliance frameworks

  such as PCI-DSS, SAR, and ISO/IEC 27001:2022.
• Solid understanding of

  cloud security principles

  , including networking, IAM, encryption, and key management.
• Competence in writing

  IAM policies, security group rules

  , and using

  infrastructure-as-code

  tools like CloudFormation or Terraform.
• Experience in

  log analysis, event correlation

  , and

  automated threat detection workflows

  .
• Strong grasp of

  security incident response

  , including containment, investigation, and mitigation.

Preferred Qualifications

• Bachelors degree in

  Computer Science, Information Security

  , or a related discipline.

• AWS Certifications

  : Security Specialty, Solutions Architect, SysOps Administrator.
• Familiarity with

  DevSecOps practices

  and integration into CI/CD pipelines.
• Experience working in

  regulated industries

  , including

  Fintech, Payment Systems, E-commerce

  , or other high-compliance environments.