Job Description
Infrastructure Security Configure, monitor, and harden AWS environments using
native controls (IAM, Security Hub, GuardDuty, WAF, KMS) and enforce zero-trust
network baselines.
Application Security Testing Perform continuous Dynamic Application Security
Testing (DAST) and regular manual penetration tests across APIs and web endpoints
using Burp Suite, Nmap, and associated security suites.
Pipeline Security (Shift-Left) Integrate automated SAST, SCA, and secret
detection tools into the CI/CD deployment pipelines to catch vulnerabilities
pre-production.
Vulnerability Management Triage, prioritize, and track vulnerabilities through
remediation workflows, collaborating closely with developers and DevOps engineers.
Incident Response Monitoring Monitor security alerts, conduct threat hunting,
respond to suspicious activities or policy violations, and document post-incident
reviews.
Compliance Best Practices Maintain alignment with security frameworks (CIS
Benchmarks, ISO 27001, SOC 2) and conduct periodic access and configuration
audits.
