1 to 25 of 32 Amazon GuardDuty Jobs in the UK

working prototypes for novel applications of GenAI in security operations, with a path to production deployment- Build security-focused applications leveraging AWS GenAI services (Amazon Bedrock, Amazon GuardDuty, Amazon Security Lake, and others) that solve real customer problems- Partner with internal builders and external partners … hardening the security architecture of a GenAI application mid-build. By mid-morning, you're writing and testing security controls for a customer's Amazon Bedrock deployment, collaborating directly with a partner engineer on implementation. After lunch, you're in a rapid architecture review for a new engagement, identifying ...

incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection AWS Config – configuration compliance and drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles … policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails AWS Secrets Manager/Systems ...

incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection AWS Config – configuration compliance and drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles … policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails AWS Secrets Manager/Systems ...

incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection AWS Config – configuration compliance and drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles … policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails AWS Secrets Manager/Systems ...

incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection AWS Config – configuration compliance and drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles … policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails AWS Secrets Manager/Systems ...

incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection AWS Config – configuration compliance and drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles … policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails AWS Secrets Manager/Systems ...

incident detection and response runbooks for the AWS environment. QualificationsRequired Technical Skills AWS Security Tooling AWS Security Hub – aggregated findings, standards, and posture management Amazon GuardDuty – threat detection AWS Config – configuration compliance and drift detection, custom/conformance rules AWS IAM/IAM Identity Center – least-privilege roles … policies, permission boundaries, federation AWS KMS & ACM – encryption key management and certificates AWS WAF & Shield – application and DDoS protection Amazon Inspector – vulnerability scanning for EC2/ECR/Lambda AWS CloudTrail – audit logging and monitoring AWS Organizations & Service Control Policies (SCPs) – multi-account guardrails AWS Secrets Manager/Systems ...

Code proficiency in Terraform, AWS CDK, and/or CloudFormation.- • Expert-level configuration and architectural experience with AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge.- • Track record of deploying SCPs and RCPs in multi-account AWS Organizations ...

best practices Strong knowledge of Cyber Security principles, including network security, encryption and application security Experience with AWS security services such as IAM, GuardDuty, KMS, Macie and WAF Knowledge of security frameworks including NIST, ISO 27001 and CIS Benchmarks Experience with Infrastructure as Code tools including Terraform or CloudFormation ...

applying TDD and BDD frameworks to infrastructure and software codebases. Vulnerability Management: Deep understanding of cloud security standards, AWS security tools (eg, Security Hub, GuardDuty, Inspector), and hands-on experience patching/remediating AWS CVEs. Desirable Qualifications Relevant certifications such as AWS Certified Security - Specialty or AWS Certified DevOps ...

integrations. Experience of implementing governance controls within hybrid Microsoft and AWS environments.AWS Security: Experience securing AWS environments using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS).Microsoft 365 and Azure Security: Strong experience with Microsoft security technologies including Microsoft ...

.Experience with automation and scripting (Python, PowerShell, Bash).Proficiency with:Azure security services: Defender for Cloud, Entra ID, Sentinel etc.AWS security services: Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch.Working knowledge of cloud incident response processes and proceduresStrong understanding of security best practices in multi-cloud environments.Desirable Skills & ExperienceFamiliarity with ...

.Experience with automation and scripting (Python, PowerShell, Bash).Proficiency with:Azure security services: Defender for Cloud, Entra ID, Sentinel etc.AWS security services: Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch.Working knowledge of cloud incident response processes and proceduresStrong understanding of security best practices in multi-cloud environments.Desirable Skills & ExperienceFamiliarity with ...

/Aurora, multi-region networking (VPC + Endpoints, Transit Gateway, Network Firewall, WAF, API Gateway), security services (IAM, KMS, Secrets Manager, SCPs, Security Hub, GuardDuty) and AI tooling (Bedrock Agentcore).Proven ownership of a production-grade EKS platform with zero-downtime deployments - ArgoCD, Istio, blue/green and canary ...

services. AWS networking: Transit Gateway, Direct Connect, VPN, subnetting, routing, DNS, hybrid connectivity and network security patterns. Security and governance: IAM, KMS, Security Hub, GuardDuty, CloudTrail, policy controls, encryption and least-privilege design. Infrastructure as Code: Terraform and/or CloudFormation, including modular design, version control and environment promotion ...

implement and maintain secured cloud security technologies alongside the Product Security team to achieve security and compliance objectives across multiple cloud technologies (e.g. AWS GuardDuty/Security Hub/Inspector, GCP Security Command Center).Enhance threat hunting, incident response, and security operations through continuous improvement in detection, analysis ...

Kubernetes Good understanding of cloud security principles, IAM and common web security vulnerabilities Experience with services such as AWS Security Hub, GuardDuty, Inspector or WAF would be advantageous. If you'd like to learn more or register your interest, hit apply as we'd love to hear from ...

networking: VPCs, Transit Gateway, Direct Connect, route tables, security groups, and hybrid network design.Working knowledge of AWS security services and best practices, including IAM, GuardDuty, Security Hub, and CloudTrail, with experience designing for compliance in regulated environments.Hands-on experience with containerised workloads on AWS, including ...

NIST CSF, but any of PCI, SOC2, HITRUST, ISO 27001/2, or similar.Strong understanding of AWS security services and controls (IAM, VPC, KMS, GuardDuty, CloudTrail) and experience securing cloud-native environments and workloads, with the ability to deploy security tools within them.Takes ownership of projects, works independently with ...

severity and likelihood lens, bringing teams along instead of acting as a blocker.Nice-to-haves:Experience with AWS security (IAM policies, Security Hub, GuardDuty).Familiarity with ElasticSearch/ELK stack.Exposure to infrastructure-as-code (Terraform) and container security.Knowledge of compliance frameworks ...

Monitoring: Build and maintain detection coverage for cloud-native threats (privilege escalation, unusual API activity, lateral movement, data exfiltration, and more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud.Vulnerability & Configuration Management: Own vulnerability management … experience in cybersecurity, with a strong focus on cloud security in production AWS environments.Deep hands-on experience with AWS security services: IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC security, and more.Good knowledge of Kubernetes security — including RBAC, pod security standards, network policies, admission controllers, and secrets management.Experience with cloud ...

energised by fast-paced, high-growth environments Technical Skills Cloud security architecture and operations, with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub). Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management). Working ...

maintenance, and energised by fast-paced, high-growth environmentsTechnical SkillsCloud security architecture and operations, with hands-on depth in AWS (IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub).Web application security fundamentals: OWASP Top 10, secure SDLC, API security, and encryption standards (TLS, AES-256, key management).Working knowledge ...

stakeholders Working knowledge of exposure management beyond CVE-only approaches - incorporating misconfiguration, identity exposure, and attack-path analysis using cloud-native tooling (AWS Inspector, GuardDuty, Security Hub, or equivalents) Experience assessing and assuring supply chain security - including third-party and vendor risk - and integrating supplier risk into wider assurance ...

worldwide, leveraging technologies like AI-driven threat detection, real-time anomaly identification, and automated response systems. You'll work with industry-leading services like Amazon GuardDuty and AWS Security Hub, while collaborating with brilliant engineers who are redefining what's possible in cloud security and operational excellence. This ...