Kerja Sepenuh Masa, AWS Security Resource di Ironbook AI - Maukerja

Job Summary

We are looking for an experienced AWS Security Consultant to design, implement, and manage cloud security solutions across AWS environments. The ideal candidate should have strong expertise in AWS security architecture, Identity and Access Management (IAM), threat detection, infrastructure protection, application security, data protection, perimeter security, and compliance.

The candidate will be responsible for implementing security controls, conducting security assessments, managing vulnerabilities, and ensuring that AWS cloud environments adhere to industry security standards and best practices.

Key Responsibilities

1. Identity & Access Management (IAM)

• Design, configure, and manage AWS IAM policies, roles, users, and permissions.
• Implement authentication, authorization, and privileged access management solutions.
• Establish least-privilege access controls and role-based access management (RBAC).
• Manage identity federation and multi-factor authentication (MFA).

2. Threat Detection & Response

• Implement and manage security monitoring and threat detection solutions.
• Work with AWS GuardDuty, Security Hub, CloudTrail, and other security services.
• Monitor security events, investigate incidents, and coordinate incident response.
• Perform threat intelligence analysis and security incident remediation.

3. Infrastructure Protection

• Design and implement AWS infrastructure and network security controls.
• Secure cloud compute resources, workloads, and network environments.
• Implement endpoint, server, and edge security measures.
• Conduct security assessments and hardening of AWS infrastructure.

4. Data Protection

• Implement data encryption at rest and in transit.
• Manage AWS KMS, encryption keys, and secrets management.
• Establish data classification and protection policies.
• Implement Data Loss Prevention (DLP) controls and data security monitoring.

5. Compliance & Privacy

• Implement security controls aligned with regulatory and compliance requirements.
• Develop and execute Infrastructure as Code (IaC) security policies.
• Work with AWS Config, AWS Audit Manager, and related compliance tools.
• Ensure cloud environments meet security governance and privacy requirements.

6. Application Security

• Implement secure Software Development Life Cycle (SDLC) practices.
• Conduct application security reviews, code reviews, and vulnerability assessments.
• Integrate security testing into CI/CD pipelines.
• Identify, assess, and remediate application security vulnerabilities.

7. Perimeter Protection

• Design and implement AWS perimeter security solutions.
• Configure and manage AWS WAF, AWS Shield, and network firewalls.
• Implement Distributed Denial of Service (DDoS) protection and mitigation strategies.
• Secure network boundaries and manage firewall policies.

Required Technical Skills

• Strong hands-on experience with AWS Cloud Security services.
• Expertise in AWS IAM, AWS Security Hub, GuardDuty, CloudTrail, and AWS Config.
• Experience with AWS KMS, Secrets Manager, and encryption technologies.
• Knowledge of AWS WAF, AWS Shield, Network Firewall, and VPC security.
• Experience with vulnerability management and threat detection.
• Knowledge of DevSecOps, secure SDLC, and CI/CD security integration.
• Experience with Infrastructure as Code (Terraform, CloudFormation).
• Understanding of cloud security frameworks, governance, risk, and compliance.
• Strong knowledge of network security, application security, and data protection.

Preferred Certifications

• AWS Certified Security – Specialty.
• AWS Certified Solutions Architect – Associate or Professional.
• Relevant cloud security or cybersecurity certifications such as CISSP, CCSP, or CISM.

Experience & Qualifications

• Proven experience in AWS cloud security engineering, consulting, or implementation.
• Hands-on experience implementing and managing enterprise-level cloud security solutions.
• Strong troubleshooting, analytical, and incident management skills.
• Ability to work with technical teams and stakeholders to implement security requirements.

Preferred Candidate Profile

• Strong practical knowledge of AWS security architecture and services.
• Ability to independently execute security implementation activities.
• Experience working on enterprise AWS cloud environments.
• Good communication and stakeholder management skills.