Contractor AWS Security Lead

Responsibilities:

• Lead the design and implementation of security solutions for AWS cloud infrastructure and applications.
• Develop and enforce security policies, standards, and best practices for AWS environments.
• Conduct security assessments, vulnerability scans, and penetration testing to identify and mitigate risks.
• Collaborate with cross-functional teams to ensure security is integrated into all stages of the development lifecycle.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Implement and manage security controls, such as IAM, encryption, and network security.
• Stay current with industry trends and emerging threats, providing thought leadership and innovation.
• Provide technical leadership and guidance to security and development teams.
• Conduct security training and awareness programs for employees.
• Develop and maintain security documentation, including policies, procedures, and incident reports.

Qualifications:

• Proven experience in designing and implementing security solutions for AWS environments.
• Extensive experience with AWS security services, including IAM, KMS, CloudTrail, GuardDuty, Nginx, and WAF.
• Strong understanding of security best practices, compliance, and governance.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
• AWS Certified Security Specialty or equivalent certification is highly desirable.
• Proficiency in security tools and technologies, such as SIEM, IDS/IPS, and vulnerability management.
• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.

Preferred Skills:

• Experience with multi-cloud environments and hybrid cloud solutions.
• Knowledge of DevSecOps, cybersecurity practices and tools.
• Familiarity with regulatory requirements and standards, such as GDPR, HIPAA, and PCI-DSS.
• Experience with automation and orchestration tools.
• Experience using API Security Management tools such as 42crunch, etc. is a Big Plus.
• Proficient in developing AuthN, AuthZ, Role-Based Access Control (RBAC) paradigms for API Endpoints.