AWS Security & Cloud Platform Consultant

Kryptos Technologies limited; Greater London; On-site; GBP 111,000 - 221,000; Part time

Job summary

Kryptos Technologies Limited seeks an experienced AWS Security & Cloud Platform Consultant to lead the technical execution of a large-scale Defensive AI and Bot Mitigation Proof of Value for a high-volume enterprise digital platform.

You will design, build, and deploy cloud-native security controls, observability solutions, traffic analytics, automation frameworks, and AI-assisted operational capabilities using AWS services and Infrastructure as Code.

Qualifications

• Experience designing and implementing AWS WAF and CloudFront protections.
• Security automation, observability, and large-scale log analytics.
• Practical IaC experience with CDK, CloudFormation or Terraform.
• Strong collaboration with security, platform engineering and SRE teams.

Responsibilities

• Design and implement AWS WAF and CloudFront-based protection architectures.
• Develop IaC templates and deployment pipelines for secure cloud platforms.
• Build observability, logging, and analytics to drive security and cost optimisation.
• Lead threat detection, bot mitigation, and API security initiatives.

Skills

AWS WAF

CloudFront

Shield Advanced

Athena

S3

CloudWatch

Kinesis Firehose

Lambda

API Security

Cost Optimisation

AWS CDK

CloudFormation

Terraform

Education

AWS Certified Security Specialty

AWS Certified Solutions Architect Professional

AWS Advanced Networking Certification

Tools

Git-based CI/CD

Job description

Tasks

AWS Security & Cloud Platform consultant

Location: London,UK

3months + Contract with possible extension

Role Summary

We are seeking an experienced AWS Security & Cloud Platform Consultant to lead the technical execution of a large-scale Defensive AI and Bot Mitigation Proof of Value for a high-volume enterprise digital platform. The consultant will design, build, and deploy cloud-native security controls, observability solutions, traffic analytics, automation frameworks, and AI-assisted operational capabilities using AWS services and Infrastructure as Code.

The role requires deep expertise in AWS networking, CloudFront, WAF, security automation, observability, large-scale log analytics, and cloud-native delivery practices.

Key Responsibilities

Cloud Security & Edge Protection

• Design and implement AWS WAF and CloudFront-based protection architectures.


• Configure managed rule sets, rate-limiting controls, traffic classification, and bot mitigation capabilities.


• Implement layered security controls to identify and mitigate malicious traffic.


• Build and optimize edge caching strategies to reduce origin load and operational costs.

Infrastructure as Code & Platform Engineering

• Develop Infrastructure as Code using AWS CDK, CloudFormation, or Terraform.


• Contribute code through enterprise Git repositories and CI/CD pipelines.


• Create reusable deployment templates, automation scripts, and operational runbooks.


• Support deployment rehearsals and production release preparation.

Observability & Analytics

Implement logging pipelines using:

• AWS WAF Logs


• Kinesis Firehose


• Amazon S3


• Amazon Athena


• CloudWatch

• Develop scheduled analytics queries and reporting frameworks.


• Establish operational dashboards, KPIs, alerting, and performance monitoring.


• Analyse traffic patterns and produce security and cost optimisation insights.

Bot Detection & Threat Intelligence

• Develop traffic profiling and behavioural analysis models.


• Analyse API usage, fingerprinting signals, client patterns, token adoption, and anomaly indicators.


• Produce evidence packs for security reviews and governance gates.


• Measure detection effectiveness, precision, false-positive rates, and operational impact.

AI & Security Automation

• Design and implement AI-assisted operational workflows.


• Build automated analysis and recommendation loops using AWS native services.


• Implement governance guardrails, kill‑switch controls, and audit mechanisms.


• Support autonomous or semi-autonomous security response workflows.

Stakeholder Engagement

Work closely with:

• Security teams


• Platform Engineering


• SRE teams


• Application Development teams


• Architecture and Governance forums

• Prepare executive‑level reports and decision‑gate documentation.


• Facilitate technical workshops and design reviews.

Requirements

Required Skills

AWS Expertise

• AWS WAF


• Amazon CloudFront


• AWS Shield Advanced


• Amazon Athena


• Amazon S3


• Amazon CloudWatch


• Amazon Kinesis Firehose


• AWS Lambda


• API Security


• Cost Optimisation

Cloud Engineering

• AWS CDK


• CloudFormation


• Terraform

CI/CD Pipelines

• Git‑based development workflows

Infrastructure Automation

Security & Networking

• Web Application Security


• Bot Management


• API Security


• DDoS Protection

Identity & Access Management

Network Security Architecture

Data & Analytics

• SQL / Athena Query Development


• Log Analytic


• Threat Detection


• Data Visualisation


• KPI and Operational Reporting

Preferred Qualifications

• AWS Certified Security Specialty


• AWS Certified Solutions Architect Professional


• AWS Advanced Networking Certification


• Experience delivering security transformation initiatives on AWS.


• Experience working in regulated, enterprise-scale environments.


• Familiarity with AI-driven operations (AIOps), security analytics, and autonomous remediation frameworks.