Transformation Consultant - AWS Cloud Security

Overview:

Security specialists address cloud security architecture, IAM strategy, proactive preventative and detective security controls, security event and logging, data protection, compliance frameworks, and threat detection.

Total Experience: 12-19 years

Role Requirements:

• 5 years AWS security, 5 years technical security experience, 2 years of consulting experience.

Core Skills:

• Security architecture, security solution engineering.

• Security operations: threat and vulnerability detection, incident response, security and event logging.

• Cloud security solutions implementation.

• Infrastructure as code (Terraform, CloudFormation, CDK), DevOps, AI Agentic frameworks.

• Compliance: PCI DSS, ISO 27001, HIPAA, NIST DoD.

• IAM, Key Management, Encryption, Network security (WAF, Shield, Security Groups).

Key Responsibilities:

• Security Architecture and Design.

• Building and deploying security capabilities in code.

• Enterprise security solutions: SSO, Federation, WAF, Firewalls, Databases, Serverless, Container, and SIEM.

• Deliver security assessments and Security EPICs Accelerator engagements.

• Apply security frameworks (NIST, ISO, CIS) to customer environments.

• Provide expertise in AWS Security Services and cloud security best practices.

Required Certifications:

• AWS Certified Security Specialty (Active).

Role Expectations:

• Deliver complex security and enterprise risk management solutions from design through implementation.

• Report into the AWS Pro Serve Security or Engagement Management Lead.

• Provide weekly status reports and document security decisions.

• Test all deliverables in a non-production environment.

• Comply with Pro Serve Provider Security Policies.

Detective Controls Monitoring:

• Establish continuous visibility using AWS Config, Guard Duty, Security Hub, CloudTrail, CloudWatch, Macie, and VPC Flow Logs.

Encryption Data Protection:

• Protect data at rest and in transit using KMS, ACM, S3 bucket policies, and IAM Access Analyzer.