Cloud Security - AWS Sr Security Analyst

Job Title: AWS Security Analyst L2

Experience: 3-6 Years

Domain: Cloud Security Operations (AWS)

Role Summary

The AWS Security Analyst L2 monitors, investigates, and responds to security threats within AWS cloud environments. This position emphasizes operational security, incident investigation and analysis, GuardDuty oversight, Security Hub findings handling, AWS WAF administration, DDoS protection support, and ongoing cloud security compliance activities.

Key Responsibilities

Security Monitoring & Incident Response

• Continuously monitor alerts from AWS Security Hub, GuardDuty, CloudTrail, and CloudWatch.
• Investigate security incidents and any suspicious activity.
• Assess Indicators of Compromise (IOC) and Indicators of Attack (IOA).
• Conduct incident triage and perform escalation as needed.
• Help with containment and remediation efforts.

AWS Security Operations

• Manage and review Security Hub findings.
• Investigate threat detections generated by GuardDuty.
• Monitor CloudTrail logs to identify anomalous behavior.
• Validate security events and remove false positives.
• Support vulnerability remediation activities.

Web Application Security

• Administer AWS WAF policies and rule sets.
• Manage IP reputation controls and geo-blocking rules.
• Create custom WAF rules to protect applications.
• Analyze application-layer attack patterns.

DDoS Protection

• Monitor AWS Shield Standard and Shield Advanced.
• Investigate DDoS attack alerts and traffic anomalies.
• Coordinate mitigation efforts with infrastructure teams.
• Support incident communications and post-incident analysis.

Compliance & Governance

• Support alignment with CIS AWS Benchmark compliance requirements.
• Assist in cloud security audits.
• Review security posture and compliance findings.
• Support regulatory requirements including ISO27001, SOC2, and GDPR.

Required Skills

AWS Security Services

• AWS Security Hub
• AWS GuardDuty
• AWS WAF
• AWS Shield
• AWS CloudTrail
• AWS Config
• AWS Inspector
• Amazon Macie

Security Operations

• Incident Response
• Threat Hunting
• Vulnerability Management
• Log Analysis
• MITRE ATT&CK

Scripting

• Python
• PowerShell
• AWS CLI

Preferred Certifications

• AWS Certified Security Specialty
• AWS Solutions Architect Associate
• CompTIA Security+
• CEH
• SC-200