15 of 15 Amazon GuardDuty Jobs in the UK

last 12 months. Strong hands-on AWS cloud security experience. Experience with: AWS IAM IAM Access Analyzer AWS KMS AWS Secrets Manager AWS CloudTrail Amazon GuardDuty AWS Security Hub Amazon Inspector Amazon Detective Experience designing and implementing secure AWS architectures. Strong understanding of cloud identity ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

aggregation. Experience integrating log pipelines with SIEM platforms. Microsoft Sentinel, ASIM schemas and KQL. AWS service logging including: RDS PostgreSQL OpenSearch Redis/Valkey GuardDuty WAF CloudTrail NGINX and containerised logging solutions. Identity and access management concepts including OIDC and SAML . JSON Schema development and validation. Technical writing ...

frameworks Playbook and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting Cloud-native security tools (CloudTrail, GuardDuty, Security Hub) Security certifications (GIAC, CEH, CISSP, etc.) Experience working with MSSPs or external SOCs £120k per annum 6-month Fixed Term Contract ...

frameworks Playbook and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting Cloud-native security tools (CloudTrail, GuardDuty, Security Hub) Security certifications (GIAC, CEH, CISSP, etc.) Experience working with MSSPs or external SOCs £120k per annum 6-month Fixed Term Contract ...

Mandatory Skills AWS Architecture and Solution Design AWS Landing Zone & Multi-Account Strategy Infrastructure Discovery & Assessment Cloud Migration & Modernization Terraform (Mandatory) CloudFormation Kubernetes/Amazon EKS Docker CI/CD (GitHub Actions, Jenkins, Azure DevOps) Networking (VPC, Transit Gateway, VPN, Direct Connect) Security (IAM, Security Hub, GuardDuty ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...

world risk and helping drive remediation. Monitoring emerging threats and translating them into practical actions. Working with AWS-native security tooling, including environments using GuardDuty and CloudTrail . Reviewing configurations and identifying opportunities to harden the AWS estate. Supporting security incidents as the UK security point of contact, coordinating … background noise. The confidence to operate independently while knowing when to involve others. Clear communication with both technical and non-technical stakeholders. Experience with GuardDuty and CloudTrail would be particularly relevant, although the hiring team is open to candidates with strong transferable AWS security experience rather than expecting ...

they do. My client is building multi-cloud platform department, and their estate today is Microsoft Azure; but they're establishing a presence in Amazon Web Services (AWS) next, with Google Cloud Platform (GCP) to follow. Therefore, they are looking for an engineer whose deepest expertise … team. Our client is looking for an AWS Cloud Engineer with the following skills: SME-level experience designing, building and operating production workloads in Amazon Web Services (AWS), ideally including the foundation of a new AWS environment (landing zone, multi-account structure, identity, networking and guardrails). Willingness ...

support troubleshooting, documentation and operational efficiency. Contribute to continuous improvements across cloud platforms, tooling and engineering practices. Requirements Good hands-on experience with Amazon Web Services and/or Microsoft Azure. Experience with a range of cloud services such as EKS/AKS, EC2, ECS/Fargate … delivering reliable, high-quality solutions. Exposure to complementary technologies such as Docker, Kubernetes, Ansible, OpenSearch, Elastic Cloud, Python, AWS Control Tower, Security Hub, GuardDuty, Inspector, GCP, FinOps, cloud cost optimisation or AI-assisted engineering tools would be beneficial. Work in a Way That Works for You We promote ...