Cloud Security Analyst

Description

Job Summary: We are seeking an AWS Security Engineer with experience to assess risks, monitor the cloud environment, lead incident response, and design security policies. Key Highlights: 1. Lead the security incident response from detection to resolution. 2. Design and implement IAM policies based on the principle of least privilege. 3. Integrate security controls into CI/CD pipelines. **About Us** We are a Professional Services Outsourcing company serving businesses in the United States and Canada, focused on the Construction sector. We recruit, train, and develop talent; advise our clients on best practices; and guarantee high standards of performance, communication, and quality. **Responsibilities** * Assess and prioritize **AWS infrastructure security risks**. * Monitor the cloud environment to detect threats and anomalies. * Lead the **security incident response** from detection to resolution. * Design and implement **IAM policies based on the principle of least privilege**. * Audit configurations of **VPC, Security Groups, and access permissions**. * Manage secrets and credentials using **AWS Secrets Manager**. * Integrate security controls into **CI/CD pipelines**. * Define security standards for containers and deployments. * Collaborate with engineering teams to improve security practices. **Requirements** * **3+ years of experience in AWS security**. * AWS GuardDuty * AWS Security Hub * AWS CloudTrail * IAM * VPC / Security Groups * Experience in **security incident detection and response**. * Experience working with **containers and Amazon ECS**. * Knowledge of **secret management and access control**. * Experience integrating security into **CI/CD (GitHub Actions or similar)**. **Desirable** * Infrastructure as Code (**Terraform, CloudFormation, or AWS CDK**) * Knowledge of **SOC2 or CIS AWS Benchmark** * Experience in **penetration testing or application security** * **AWS Security Specialty** certification **Key Technologies** * AWS • GuardDuty * Security Hub * IAM * CloudTrail * Secrets Manager * ECS * Terraform * CloudFormation * GitHub Actions * SOC2 * CIS Benchmarks **Work Mode** * Monday to Friday: 9am to 6pm * Mode: On-site Application Question(s): * Indicate document type and number (DNI or CE) * Are you available to work on-site in Surco? (Reference: El Trigal Commercial Center) * Do you have advanced English proficiency? * What are your salary expectations? * We operate under the SME payroll regime — do you agree with this? Work Location: On-site employment