Security Analyst

Analyze AWS Control Environment:

• Deeply understand AWS operational and technical control environment to demonstrate and communicate control posture to stakeholders.
• Implement and Maintain Controls:
• Implement, maintain, and monitor security controls within AWS environments, including access controls, encryption, and other security configurations.
• Incident Response:
• Investigate and analyze security incidents, identify root causes, and develop strategies to mitigate risks and prevent future breaches.

Compliance:

Assist with compliance efforts by gathering and managing evidence, and by providing guidance on best practices for meeting compliance requirements.

Security Assessments:

Conduct security assessments, vulnerability testing, and risk analysis to identify potential weaknesses in AWS environments.

Audits:

Participate in internal and external security audits, ensuring that AWS infrastructure meets audit requirements.

Documentation:

Maintain thorough documentation on the security status of AWS infrastructure, including security policies, procedures, and incident response plans.

Training and Education:

Provide training and education to other team members and stakeholders on AWS security best practices.

Stay Updated:

Keep abreast of the latest security threats and vulnerabilities, and adapt security measures accordingly.

Required Skills and Experience:

AWS Expertise:

Security Knowledge

Analytical Skills:

Communication Skills:

Problem-Solving Skills

Experience:

Certifications: Industry-recognized certifications such as CISSP, CEH, or AWS Security certifications are a plus.

Example

Responsibilities (depending on the specific role):

Security Analyst (Compliance): Focus on demonstrating compliance with regulatory requirements (e.g., SOC 2, HIPAA).

• Security Analyst (Incident Response): Lead efforts to investigate and respond to security incidents within AWS.
• Security Analyst (Infrastructure): Focus on securing AWS infrastructure and services, including networking, storage, and compute.