AWS Security Specialist
New
J
JobgetherCloud security
Based in Canada, no specific time-zone restrictionFull-TimeSenior
SalaryMonthly compensation of USD 4,000–6,000, paid over 13 months. Additional performance-based bonus.
Apply NowOpens the employer's application page
Job Details
- Languages
- Mandarin communication skills are essential; English reading and writing proficiency.
- Experience
- 3–5+ years of hands-on AWS experience
- Required Skills
- AWSPythonBashGoTerraform
Requirements
- Have 3–5+ years of hands-on AWS experience and a strong understanding of the AWS Shared Responsibility Model.
- Bring advanced knowledge of Kubernetes and Amazon EKS security operations, including storage security, runtime protection, and container network isolation.
- Understand AWS VPC architecture, including Transit Gateway and VPN hybrid connectivity, CDN, and WAF deployment.
- Be proficient with CloudWatch for log analysis, metrics monitoring, and automated alerting.
- Have strong scripting skills in at least one of Python, Go, or Bash.
- Have experience working with security, compliance, or audit teams and translating requirements into engineering solutions.
- Be able to independently perform threat modeling and identify risks in system architecture.
- Have strong technical documentation, problem-solving, and cross-functional communication skills.
- Have Mandarin communication ability for daily collaboration and meetings, and English reading and writing proficiency.
- AWS Certified Security – Specialty and Certified Kubernetes Security Specialist (CKS) certifications are nice to have.
- DevSecOps implementation experience, including CI/CD security tools such as Snyk, Prisma Cloud, or Trivy, is a plus.
- Experience with Terraform or AWS CDK is a plus.
Responsibilities
- Design and implement defense-in-depth security architecture across AWS environments.
- Strengthen VPC network security using Security Groups, NACLs, PrivateLink, and secure connectivity configurations.
- Implement and maintain least-privilege IAM controls and data encryption strategies.
- Secure Amazon EKS environments through infrastructure hardening, Kubernetes Network Policies, and IRSA.
- Establish container image scanning workflows and improve container security practices.
- Build security monitoring, logging, and alerting with CloudWatch, CloudTrail, GuardDuty, and Security Hub.
- Participate in incident response, investigate potential threats, and coordinate remediation.
- Translate security policies, ISO 27001 and SOC 2 requirements, and audit findings into technical controls.
- Conduct threat modeling, identify architectural vulnerabilities, and drive security remediation.
- Automate infrastructure compliance, auditing, and remediation using Terraform or CloudFormation.
View Full Description & ApplyYou'll be redirected to the employer's site
