6 of 6 Contract Amazon GuardDuty Jobs

last 12 months. Strong hands-on AWS cloud security experience. Experience with: AWS IAM IAM Access Analyzer AWS KMS AWS Secrets Manager AWS CloudTrail Amazon GuardDuty AWS Security Hub Amazon Inspector Amazon Detective Experience designing and implementing secure AWS architectures. Strong understanding of cloud identity ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

aggregation. Experience integrating log pipelines with SIEM platforms. Microsoft Sentinel, ASIM schemas and KQL. AWS service logging including: RDS PostgreSQL OpenSearch Redis/Valkey GuardDuty WAF CloudTrail NGINX and containerised logging solutions. Identity and access management concepts including OIDC and SAML . JSON Schema development and validation. Technical writing ...

Mandatory Skills AWS Architecture and Solution Design AWS Landing Zone & Multi-Account Strategy Infrastructure Discovery & Assessment Cloud Migration & Modernization Terraform (Mandatory) CloudFormation Kubernetes/Amazon EKS Docker CI/CD (GitHub Actions, Jenkins, Azure DevOps) Networking (VPC, Transit Gateway, VPN, Direct Connect) Security (IAM, Security Hub, GuardDuty ...

alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma … Strong hands-on experience with Splunk and SPL query development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with ...