AWS Cloud Platform Security Engineer Specialist

Role Location Job Description

AWS

Cloud

Platform

Security

Engineer

Specialist Chennai / Bangalore (Only local candidates – No relocation) Position Overview: We are seeking a skilled Cloud Engineer for the global cloud engineering to lead the development, implementation, and maintenance of global cloud platform for SCB. They collaborate with cross functional teams to ensure platform reliability, availability and security are consistent with SCB standards across multiple cloud service providers. Key Responsibilities: · Developing secure cloud architectures that incorporate best practices for data protection, access control, and threat prevention. · Ensuring that security preventive, detective controls are integrated into the architecture from the outset. · Utilizing cloud-native security services provided by cloud platforms such as e.g., AWS Security Hub, AWS Organizations, KMS, Secrets Manager, GuardDuty, Config, Certificate Manager etc) · Continuously monitoring cloud environments for security incidents and vulnerabilities using automated tools and manual techniques (optional) · Responding to security incidents, conducting forensic analysis, and implementing remediation measures (optional) · Implementing and managing AWS IAM Roles policies to ensure secure access to cloud resources. · Utilizing Python, Shell automation tools and scripts to streamline security processes such as incident response, patch management, and configuration management. · Implementing Infrastructure as Code (IaC) using Terraform to manage and secure cloud infrastructure · Designing and implementing secure network architectures, including virtual private clouds (VPCs), subnets, and security groups. · Configuring network security controls such as firewalls, VPNs, and network access control lists (ACLs). Qualifications: · 3+ years of AWS experience · Terraform, Python, Golang (good to have), Bash scripting, YAML, Good orchestration skills. · AWS certification preferred

Technical Competency Name: Proficiency Levels Cloud Architecture Advanced Cloud Technologies Advanced Resiliency and Security Advanced DevOps Advanced AWS Advanced Terraform Advanced Python Core CSPM Advanced

Skill Matrix Table Checks

AWS Certified Security Speciality (SCS-C02) Certification Mandatory & Must be Valid

AWS Security Hub, AWS Organizations, KMS, Secrets Manager,

GuardDuty, Config, Certificate Manager, EKS, KMS, IAM, S3,

CONFIG exp Have enterprise level hands on working experience 5+ years

Cloud security preventive, detective controls integrations into

the architecture on AWS Cloud – Cloud Security Posture

Management (CSPM) Have enterprise level hands on working experience 5+ years

Terraform Certification (Yes/No/Validity) Certificate No

Python, Go, Shell Scripting Have foundational knowledge and hands on experience for all items