AWS Security Engineer

SYETA INC.; United States; On-site; USD 147,000 - 208,000; Full time

Job summary

An established industry player is seeking a Security Engineer to enhance application and infrastructure security. This entry-level position involves implementing AWS IAM, managing compliance, and integrating security within CI/CD pipelines. You will collaborate with cross-functional teams to establish security guardrails and respond to incidents. Join a dynamic team dedicated to safeguarding technology and ensuring compliance in a rapidly evolving landscape. This role promises growth and the opportunity to make a significant impact in the realm of IT security, all while working with cutting-edge AWS technologies.

Qualifications

• Experience with AWS IAM, security best practices, and compliance.
• Knowledge of Infrastructure as Code tools like CloudFormation and Terraform.

Responsibilities

• Implement and manage IAM and permission boundaries for secure access.
• Set up multi-account governance and compliance using AWS tools.
• Integrate security into CI/CD pipelines and support incident response.

Skills

AWS Identity and Access Management (IAM)

Multi-Factor Authentication (MFA)

AWS CloudFormation

Terraform

Incident Response

Infrastructure as Code (IaC)

Security Best Practices

Compliance and Auditability

Tools

AWS CloudTrail

Amazon CloudWatch

AWS Config

AWS Lambda

AWS WAF

AWS Shield

AWS Security Hub

AWS Inspector

Job description

Security Engineer (L4) - Application and Infrastructure Security

Location: United States

Salary: $147,000.00-$208,000.00

Responsibilities:

1. Implement and manage AWS Identity and Access Management (IAM), and Permission Boundaries.
2. Define fine-grained permissions using IAM roles, policies, and attribute-based access control (ABAC).
3. Enforce secure authentication and access control with MFA, IAM Access Analyzer, and AWS Secrets Manager.
4. Account Governance & Compliance:
1. Set up and govern multi-account environments using AWS Organizations, AWS Control Tower, and Service Control Policies (SCPs).
2. Leverage AWS Config and AWS Audit Manager to enforce compliance and auditability across accounts.
3. Create and manage resource tagging strategies and tag policies.
4. Deploy and maintain monitoring solutions using AWS CloudTrail, Amazon CloudWatch, AWS Config, and AWS X-Ray.
5. Integrate advanced threat detection services such as:
1. Amazon GuardDuty for threat intelligence
2. AWS Inspector for automated vulnerability management
3. AWS Security Hub for centralized security posture management
6. Implement VPC security best practices using Security Groups, Network ACLs, VPC Flow Logs, and Private Endpoints.
7. Configure and manage AWS WAF, AWS Shield, and AWS Firewall Manager for application-layer and DDoS protection.
8. Utilize AWS Key Management Service (KMS) and CloudHSM for encryption and secure key storage.
9. Develop and maintain secure Infrastructure as Code (IaC) using AWS CloudFormation, Terraform, and CDK.
10. Integrate security into CI/CD pipelines using services like AWS CodePipeline, CodeBuild, and third-party tools.
11. Build runbooks and automated remediations using AWS Lambda, EventBridge, and Systems Manager.
5. Collaboration & Incident Response:
1. Partner with DevOps, Engineering, and Compliance teams to integrate security guardrails early in development.
2. Support security incident response efforts, perform forensics, and contribute to continuous improvement of incident response playbooks.

Seniority level

Entry level

Employment type

Contract

Job function

Information Technology

Industries

IT Services and IT Consulting