Job Description:

Role & Responsibilities:
Design and implement AWS Organizational Governance including Service Control Policies (SCPs), multi-account patterns, and delegated admin setups.
Build and maintain logging and audit foundations: Org CloudTrail, AWS Config aggregators, S3 log archive hardening, GuardDuty, Security Hub.
Operate CSPM/CNAPP tooling (e.g., Wiz.io): onboard accounts/resources, tune posture policies, integrate with ticketing and log routing pipelines (Cribl/SIEM).
Develop Infrastructure as Code (Terraform) modules and reusable patterns with policy-as-code integration and CI scanning.
Conduct vulnerability and risk prioritization using CVSS, exploit context, asset criticality, and signal sources.
Automate validation, evidence export, and reporting using Python (boto3), AWS CLI, and shell scripting.
Manage identity and access: IAM least privilege, cross-account role assumptions, permission boundaries, and automation roles.




Handle observability and data routing pipelines (Cribl, Firehose, Kinesis).
Ensure compliance awareness, especially HIPAA safeguard themes (auditability, access control, data protection).
Design and extract metrics & KPIs: coverage %, MTTR, SLA compliance, control efficacy.

Preferred Candidate Profile:
Solid experience in AWS Security and Cloud Governance.
Expertise in Terraform and Python automation for cloud security tasks.
Deep understanding of IAM, SCPs, CloudTrail, Config, GuardDuty, Security Hub, and CNAPP tools.
Hands-on experience with CI/CD integration and cloud security pipeline automation.
Familiarity with compliance frameworks (HIPAA, ISO, SOC) and reporting KPIs.
Robust problem-solving skills and ability to design reusable security patterns in a multi-account AWS setting.

📌 Aws Cloud Security Kolkata
🏢 Cloudxtreme
📍 Kolkata