12 of 12 Remote/Hybrid Permanent Amazon GuardDuty Jobs

analysis, software composition analysis, container scanning, and infrastructure as code scanning): Snyk, Semgrep, SonarQube, Checkmarx, Veracode, Trivy, Checkov Cloud security services: AWS Security Hub, Amazon GuardDuty, Google Security Command Center Detection and logging: Splunk, Elastic, Datadog, Microsoft Sentinel, Google Security Operations Has built or specified security gates ...

security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions, and data normalisation standards aligned to OCSF. Troubleshoot ingestion ...

effectively to technical and senior stakeholders. Experience providing team leadership, mentoring and developing technical talent. Desirable Experience and Skills Experience with Datadog Security, AWS GuardDuty, AWS Security Hub, AWS Inspector, Rapid7 and Cloudflare WAF. Security automation and scripting experience using PowerShell, Python or KQL. Knowledge of ISO/ ...

policies, network segmentation, encryption and logging Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection Triage and address security findings identified through ...

experience (typically 4+ years) across DevOps or cloud engineering, with a significant focus on security. Hands-on AWS security experience, including IAM, S3, CloudTrail, GuardDuty, Security Hub, and AWS Config. Hands-on ownership of CI/CD pipelines (e.g., GitHub Actions, Jenkins, TeamCity, Azure DevOps), including adding security gates ...

response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting Extensive experience with AWS Cloud-native security tools (CloudTrail, GuardDuty, Security Hub) Security certifications (GIAC, CEH, CISSP, etc.) Experience working with MSSPs or external SOCs £100k per annum 6-month Fixed Term Contract ...

work, generating, and analysing at pace while keeping your human judgment at the center of every decision. Strong working knowledge of AWS security, IAM, GuardDuty, Security Hub, WAF, and related services. Familiarity with common vulnerability classes, OWASP, and secure SDLC frameworks. Comfortable working across SaaS, multi‐tenant architectures. ...

edge. AWS Cloud Telemetry Integrity: Support the end-to-end flow of AWS security telemetry (CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl … parsing complex regex strings. Storage Architecture: Manage real-time streaming technologies (e.g., Kinesis) and security data storage solutions including S3 buckets and Amazon Security Lake. Data Tiering: Support the classification of data into appropriate storage tiers—Hot (security events), Warm (application and performance), and Cold (compliance)—to reduce volume ...

edge. AWS Cloud Telemetry Integrity: Support the end-to-end flow of AWS security telemetry (CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl … parsing complex regex strings. Storage Architecture: Manage real‐time streaming technologies (e.g., Kinesis) and security data storage solutions including S3 buckets and Amazon Security Lake. Data Tiering: Support the classification of data into appropriate storage tiers—Hot (security events), Warm (application and performance), and Cold (compliance)—to reduce volume ...

edge. AWS Cloud Telemetry Integrity: Support the end-to-end flow of AWS security telemetry (CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl … parsing complex regex strings. Storage Architecture: Manage real‐time streaming technologies (e.g., Kinesis) and security data storage solutions including S3 buckets and Amazon Security Lake. Data Tiering: Support the classification of data into appropriate storage tiers—Hot (security events), Warm (application and performance), and Cold (compliance)—to reduce volume ...

edge. AWS Cloud Telemetry Integrity: Support the end-to-end flow of AWS security telemetry (CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl … parsing complex regex strings. Storage Architecture: Manage real‐time streaming technologies (e.g., Kinesis) and security data storage solutions including S3 buckets and Amazon Security Lake. Data Tiering: Support the classification of data into appropriate storage tiers—Hot (security events), Warm (application and performance), and Cold (compliance)—to reduce volume ...

SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden our AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, and zero‐trust patterns. Run pen testing end‐to‐end: scope and coordinate engagements with both AI‐driven scanners and human researchers, then drive … reviews, and pen test responses. What we’re looking for 3+ years in security engineering with hands‐on AWS security: IAM, KMS, networking, secrets, GuardDuty/Security Hub. Strong coding ability in TypeScript or Python or Go comfortable shipping production code, not just configs and scripts. Application security fluency ...