AWS Security Specialist

Jobgether; United States; Remote; USD 45,000 - 67,000; Full time

Benefits offered by this job

Fully remote

13‑month pay cycle

Performance-based bonus

Global organization

Job summary

Jobgether is seeking a security-focused engineer to design and implement defense-in-depth security across AWS and EKS environments. You will harden infrastructure, enforce least-privilege IAM, and drive container security and threat modeling.

You will translate regulatory requirements into engineering controls, automate compliance with Terraform or CloudFormation, and collaborate with global operations in a fully remote role.

Qualifications

• 3–5+ years hands-on AWS experience and understanding of the AWS Shared Responsibility Model.
• Advanced knowledge of Kubernetes and EKS security operations.
• Deep understanding of AWS VPC architecture including Transit Gateway, VPN, CDN and WAF deployment.
• Proficiency with CloudWatch for logs, metrics, and automated alerting.
• Scripting skills in Python, Go, or Bash for automation tasks.
• Experience translating regulatory/compliance requirements into engineering solutions.
• Ability to perform threat modeling and identify security risks.
• Strong documentation and cross‑functional communication skills.
• Mandarin and English proficiency for daily collaboration.

Responsibilities

• Design defense-in-depth security architecture across AWS environments.
• Harden EKS infrastructure, Kubernetes Network Policies, and IRSA.
• Establish container image scanning workflows and improve container security.
• Build real-time security monitoring, logging, and alerting with CloudWatch/CloudTrail/GuardDuty/Security Hub.
• Coordinate remediation during security incidents and act as liaison between ops and security.
• Translate security policies and audit findings into actionable controls.
• Champion Security as Code practices via Terraform or CloudFormation.

Skills

AWS

Kubernetes

IRSA

Threat modeling

Automation

Cross-functional communication

Mandarin

English

Tools

Terraform

CloudFormation

Snyk

Prisma Cloud

Trivy

AWS CDK

Job description

Accountabilities:

• Design and implement defense-in-depth security architecture across AWS environments.
• Strengthen VPC network security through Security Groups, Network Access Control Lists (NACLs), PrivateLink, and secure connectivity configurations.
• Implement and maintain least-privilege IAM controls and data encryption strategies.
• Own the security of Amazon EKS environments, including infrastructure hardening, Kubernetes Network Policies, and IAM Roles for Service Accounts (IRSA).
• Establish and maintain container image scanning workflows and improve container security practices.
• Build real-time security monitoring, logging, and alerting systems using CloudWatch, CloudTrail, GuardDuty, and Security Hub.
• Participate in security incident response, investigate potential threats, and coordinate remediation activities.
• Serve as the technical point of contact between operations teams and the central enterprise security function.
• Translate security policies, ISO 27001 and SOC 2 requirements, and internal audit findings into actionable technical architecture and engineering controls.
• Conduct threat modeling, identify architectural vulnerabilities, and drive security remediation across teams.
• Champion Security as Code practices by automating infrastructure compliance, auditing, and remediation through Terraform or CloudFormation.

Requirements:

• 3–5+ years of hands‑on AWS experience, with a strong understanding of the AWS Shared Responsibility Model.
• Advanced knowledge of Kubernetes and Amazon EKS security operations, including storage security, runtime protection, and container network isolation.
• Deep understanding of AWS VPC architecture, including hybrid cloud connectivity through Transit Gateway and VPN, as well as CDN and WAF deployment.
• Proficiency with CloudWatch for log analysis, metrics monitoring, and automated alerting.
• Strong scripting skills in at least one of Python, Go, or Bash, with the ability to develop automation scripts for security and operations tasks.
• Experience working with security, compliance, or audit teams, and the ability to translate regulatory and compliance requirements into engineering solutions.
• Ability to independently perform threat modeling and identify security risks in system architecture.
• Strong technical documentation, problem-solving, and cross‑functional communication skills.
• Mandarin communication ability for daily collaboration and meetings, along with English reading and writing proficiency.
• Nice to have:
• AWS Certified Security – Specialty certification.
• Certified Kubernetes Security Specialist (CKS) certification.
• DevSecOps implementation experience, including integrating security tools into CI/CD pipelines, such as Snyk, Prisma Cloud, or Trivy.
• Experience with Infrastructure as Code tools such as Terraform or AWS CDK.
• Previous experience in cryptocurrency exchanges, Web3, or related industries.
• An operations or DevOps engineering background, particularly experience transitioning from infrastructure or operations into cloud security.

Benefits:

• Monthly compensation of USD 4,000–6,000 , paid over 13 months.
• Additional performance‑based bonus.
• Permanent, full‑time employment.
• Fully remote working arrangement, with no specific time‑zone restriction.
• Opportunity to contribute to the security infrastructure of a global organization operating across multiple regions.