15 of 15 Amazon GuardDuty Jobs

last 12 months. Strong hands-on AWS cloud security experience. Experience with: AWS IAM IAM Access Analyzer AWS KMS AWS Secrets Manager AWS CloudTrail Amazon GuardDuty AWS Security Hub Amazon Inspector Amazon Detective Experience designing and implementing secure AWS architectures. Strong understanding of cloud identity ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

aggregation. Experience integrating log pipelines with SIEM platforms. Microsoft Sentinel, ASIM schemas and KQL. AWS service logging including: RDS PostgreSQL OpenSearch Redis/Valkey GuardDuty WAF CloudTrail NGINX and containerised logging solutions. Identity and access management concepts including OIDC and SAML . JSON Schema development and validation. Technical writing ...

Mandatory Skills AWS Architecture and Solution Design AWS Landing Zone & Multi-Account Strategy Infrastructure Discovery & Assessment Cloud Migration & Modernization Terraform (Mandatory) CloudFormation Kubernetes/Amazon EKS Docker CI/CD (GitHub Actions, Jenkins, Azure DevOps) Networking (VPC, Transit Gateway, VPN, Direct Connect) Security (IAM, Security Hub, GuardDuty ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

world risk and helping drive remediation. Monitoring emerging threats and translating them into practical actions. Working with AWS-native security tooling, including environments using GuardDuty and CloudTrail . Reviewing configurations and identifying opportunities to harden the AWS estate. Supporting security incidents as the UK security point of contact, coordinating … background noise. The confidence to operate independently while knowing when to involve others. Clear communication with both technical and non-technical stakeholders. Experience with GuardDuty and CloudTrail would be particularly relevant, although the hiring team is open to candidates with strong transferable AWS security experience rather than expecting ...

configuration management using Terraform, CloudFormation, and Ansible. Containerization & Orchestration: Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud, leveraging services like Amazon EKS, ECS, and Fargate. Monitoring & Incident Response: Implement AWS CloudWatch, AWS Security Hub, GuardDuty, Splunk, or ELK for proactive monitoring, logging, and compliance reporting. … using Terraform, CloudFormation, and Ansible. Proficiency in containerization and orchestration (Docker, Kubernetes, EKS, ECS, Fargate). Strong understanding of AWS security services (AWS IAM, GuardDuty, Security Hub,AWS KMS, AWS WAF, AWS Config, AWS Secrets Manager). Knowledge of federal cybersecurity frameworks (RMF, NIST 800-171/53, STIGs ...

they do. My client is building multi-cloud platform department, and their estate today is Microsoft Azure; but they're establishing a presence in Amazon Web Services (AWS) next, with Google Cloud Platform (GCP) to follow. Therefore, they are looking for an engineer whose deepest expertise … team. Our client is looking for an AWS Cloud Engineer with the following skills: SME-level experience designing, building and operating production workloads in Amazon Web Services (AWS), ideally including the foundation of a new AWS environment (landing zone, multi-account structure, identity, networking and guardrails). Willingness ...

resilient cloud environments. Day to day, this could include: Improving security across AWS and Azure cloud environments Working with AWS security services including GuardDuty, CloudTrail, IAM and Security Hub Working across Azure security services such as Microsoft Defender for Cloud, Entra ID, Key Vault and Azure Policy Strengthening identity … become a bigger part of their role. Experience across some of the following would be valuable: AWS experience, ideally with exposure to IAM, GuardDuty, CloudTrail and/or Security Hub Azure experience, particularly around Defender for Cloud, Entra ID/IAM, Key Vault, Azure Policy and cloud security best ...