Responsibilities:

• Monitor AWS cloud system logs (CloudTrail, CloudWatch, VPC Flow Logs), set-up alert systems and create performance reports.
• Advanced knowledge of Amazon GuardDuty and Inspector
• Build feature-rich dashboards using AWS native tools for continuous cyber operations cloud monitoring.
• Work alongside developers to make improvements to the cloud security system and ensure it is functioning optimally.
• Monitor and ensure the reliability of cloud security infrastructure.
• Develop and maintain cloud security monitoring tools and processes, such as cloud SIEM, CSPM, and others.
• Identify and troubleshoot performance issues in real-time.
• Anticipate future problem areas by monitoring workflows and network traffic patterns.
• Clean and organize cyber operations data for analysis and monitoring use applicable tools.
• Generate queries to develop meaningful insights from the analysis to support decision making.
• Work with stakeholders to create dashboards to present insights, using visualization tools.
• Manage cyber operations cloud change control policies and procedures.
• Centralize, coordinate, and communicate cyber operations cloud changes to relevant stakeholders.
• Perform alert triage and remediation, as well as incident response.

Must-Have :

• 5-7 years of experience
• AWS Security Specialist
• Experience with Splunk SIEM
• Advanced knowledge of Amazon GuardDuty and Inspector
• Experience with Cloud Security Monitoring use cases and Cloud system logs (CloudTrail, CloudWatch, VPC Flows)

Posted By