Overview
The AWS Cloud DevSecOps Engineer will join a Cloud Security Operations team, playing a crucial role in daily cloud security operations within a major UK financial services organisation. This position involves collaboration with Security, Infrastructure, and Engineering teams to enhance the overall security posture of the enterprise AWS platform, focusing on incident resolution, remediation of vulnerabilities, and improving operational efficiency through automation.
Responsibilities
- Investigate and resolve AWS security incidents across enterprise environments.
- Own Security Hub, GuardDuty, AWS Inspector, and AWS Config findings through to remediation.
- Support Linux (RHEL) production environments and troubleshoot complex operational issues.
- Perform root cause analysis and implement long-term preventative improvements.
- Manage vulnerabilities across EC2, IAM, VPC, ECS/Fargate, S3, RDS, and supporting AWS services.
- Automate operational and security processes using Python, Bash, PowerShell, Ansible, and AWS-native services.
- Support BAU cloud operations, production incidents, and on-call activities.
- Work with Security, Infrastructure, and Development teams to continuously improve cloud security and operational resilience.
Requirements
- Strong hands-on experience in AWS Cloud Operations or DevSecOps.
- Proficiency in Linux (RHEL) administration and troubleshooting.
- Experience with AWS Security Hub, GuardDuty, Inspector, and Config.
- Knowledge in Vulnerability Management and Incident Management & Root Cause Analysis.
- Familiarity with IAM, EC2, VPC, Lambda, S3, RDS, and ECS/Fargate.
- Programming experience in Python, Bash, PowerShell, or Ansible.
- Experience with Datadog or similar monitoring platforms.
- Awareness of ITIL / ServiceNow environments, with experience in Terraform, Docker, Kubernetes/EKS, CI/CD security, and AWS certifications being desirable.