Responsibilities:
• Define and drive cloud security principles, standards, and reference architectures across the organization
• Partner with DevOps, CI/CD, Architecture, and Engineering teams to embed security into product and infrastructure development
• Design and implement security controls and processes to meet compliance and audit requirements
• Drive secure-by-design and shift-left security practices throughout the SDLC
• Research emerging threats and attack vectors and proactively improve security posture
• Implement and manage cloud and Kubernetes security tooling to continuously monitor and reduce risk
• Support engineers in building and operating secure cloud-native products and services

Requirements:
• Strong hands-on experience with AWS and AWS security services (IAM, KMS, Config, CloudTrail, CloudWatch, GuardDuty, Secrets Manager)
• Experience working with engineering teams in implementing shift-left security practices
• Knowledge of Infrastructure as Code (Terraform, CloudFormation, AWS CDK)
• Experience with Git, GitLab, and CI/CD pipelines
• Hands-on Kubernetes (EKS), Docker, ECS, admission controllers, and supply chain security experience
• Solid understanding of networking and security protocols (TCP/IP, TLS, VPN)
• Strong cloud security architecture and engineering background
• Fluent English communication skills
• Proactive, collaborative, and solution-oriented mindset

Nice to have:
• AWS Certified Security – Specialty (or equivalent certification)
• Familiarity with AI tools and LLM platforms (e.g. AWS Bedrock, Claude)