AWS IT Security Specialist (Intermediate)

Inbenta; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

A leading technology company in Toronto is seeking an Intermediate AWS IT Security Specialist to enhance security controls within AWS environments. The ideal candidate will work across teams, ensuring compliance and best practices in cloud security. Required qualifications include a bachelor’s degree in a related field, 2–5 years of IT security experience, and proficiency in AWS services. This position offers a collaborative environment and opportunities for professional growth.

Qualifications

• 2–5 years of experience in IT Security, with at least 1–2 years in AWS security.
• Solid understanding of AWS core services (EC2, S3, IAM, VPC).
• Familiarity with IAM best practices and encryption standards.

Responsibilities

• Monitor AWS security posture using tools like GuardDuty and CloudTrail.
• Assist in implementing AWS security controls according to industry frameworks.
• Participate in architecture reviews for secure service deployment.

Skills

AWS core services

IT Security

Scripting/Automation (Python, Bash, Terraform)

Cloud Security Operations

Education

Bachelor’s degree in Computer Science or Information Security

Tools

AWS GuardDuty

AWS Security Hub

AWS Inspector

Datadog

Job description

AWS IT Security Specialist (Intermediate)

We are looking for an Intermediate AWS IT Security Specialist to support the design, implementation, and maintenance of security controls within our AWS cloud environments. The successful candidate will collaborate with DevOps, Infrastructure, and Application teams to secure cloud-native services, enforce security best practices, and help maintain regulatory compliance. This role is ideal for someone with strong foundational experience in AWS and cybersecurity who is ready to grow into a more advanced role.

Key Responsibilities

• Cloud Security Operations
  • Monitor and maintain security posture across AWS accounts using native tools such as AWS GuardDuty, CloudTrail, Config, and Security Hub.
  • Conduct regular audits of IAM policies, roles, and groups to ensure least privilege access and secure authentication practices (e.g., MFA, federated access).
  • Perform vulnerability assessments and remediation using tools such as AWS Inspector, Tenable, or equivalent.
  • Respond to security incidents in AWS environments, including investigation, containment, and reporting.
• Security Configuration & Compliance
  • Assist in the implementation of AWS security controls in accordance with industry frameworks such as NIST, ISO 27001/27017/27701, and GDPR.
  • Support compliance and governance initiatives by maintaining documentation and conducting security reviews.
  • Develop and maintain AWS security automation scripts using Python, Bash, or Terraform.
• Infrastructure and Application Security
  • Participate in architecture reviews to ensure new services or features are securely designed and deployed.
  • Implement and manage security groups, network ACLs, and VPC configurations to enforce secure connectivity.
  • Work with application and DevOps teams to apply security best practices in CI/CD pipelines and infrastructure as code (IaC).
• Monitoring & Logging
  • Centralize and analyze AWS logs using tools such as Amazon CloudWatch, Elasticsearch (OpenSearch), or third-party SIEM platforms (e.g., Datadog).
  • Configure alerts and dashboards for security-related metrics and anomalies.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field; or equivalent professional experience (5 yrs).
• 2–5 years of experience in IT Security, with at least 1–2 years in securing AWS environments.
• Solid understanding of AWS core services (EC2, S3, RDS, IAM, Lambda, VPC, CloudFront).
• Experience with AWS security services (GuardDuty, Security Hub, Inspector, KMS, etc.).
• Familiarity with IAM best practices, key management, and encryption standards.
• Knowledge of TCP/IP networking, firewalls, VPNs, and DNS in cloud environments.
• Proficiency in scripting or automation (Python, Bash, or Terraform preferred).

Preferred Qualifications

• AWS Security Specialty or Solutions Architect Associate/Professional certification.
• Experience with DevSecOps or integrating security in CI/CD pipelines.
• Familiarity with regulatory frameworks like NIST / GDPR.
• Experience using SIEM tools (e.g., Datadog) and endpoint protection platforms.
• Understanding of container security (ECS, EKS, Docker).

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication.
• Ability to work collaboratively across cross-functional teams.
• Detail-oriented with a proactive approach to identifying and mitigating risks.
• Work independently and take initiative with given projects.

*By submitting your application, you acknowledge that you have read and understood our Applicant Privacy Policy. Your personal information will be processed for recruitment and hiring purposes, in accordance with applicable data protection laws. Where required by law, you consent to the processing of your personal information as described in that policy.