AWS Security Specialist

Accountabilities:: Design and implement defense-in-depth security architecture across AWS environments. Strengthen VPC network security through Security Groups, Network Access Control Lists (NACLs), PrivateLink, and secure connectivity configurations. Implement and maintain least-privilege IAM controls and data encryption strategies. Own the security of Amazon EKS environments, including infrastructure hardening, Kubernetes Network Policies, and IAM Roles for Service Accounts (IRSA). Establish and maintain container image scanning workflows and improve container security practices. Build real-time security monitoring, logging, and alerting systems using CloudWatch, CloudTrail, GuardDuty, and Security Hub. Participate in security incident response, investigate potential threats, and coordinate remediation activities. Serve as the technical point of contact between operations teams and the central enterprise security function. Translate security policies, ISO 27001 and SOC 2 requirements, and internal audit findings into actionable technical architecture and engineering controls. Conduct threat modeling, identify architectural vulnerabilities, and drive security remediation across teams. Champion Security as Code practices by automating infrastructure compliance, auditing, and remediation through Terraform or CloudFormation. Requirements: 3–5+ years of hands-on AWS experience, with a strong understanding of the AWS Shared Responsibility Model. Advanced knowledge of Kubernetes and Amazon EKS security operations, including storage security, runtime protection, and container network isolation. Deep understanding of AWS VPC architecture, including hybrid cloud connectivity through Transit Gateway and VPN, as well as CDN and WAF deployment. Proficiency with CloudWatch for log analysis, metrics monitoring, and automated alerting. Strong scripting skills in at least one of Python, Go, or Bash, with the ability to develop automation scripts for security and operations tasks. Experience working with security, compliance, or audit teams, and the ability to translate regulatory and compliance requirements into engineering solutions. Ability to independently perform threat modeling and identify security risks in system architecture. Strong technical documentation, problem-solving, and cross-functional communication skills. Mandarin communication ability for daily collaboration and meetings, along with English reading and writing proficiency. Nice to have: AWS Certified Security – Specialty certification. Certified Kubernetes Security Specialist (CKS) certification. DevSecOps implementation experience, including integrating security tools into CI/CD pipelines, such as Snyk, Prisma Cloud, or Trivy. Experience with Infrastructure as Code tools such as Terraform or AWS CDK. Previous experience in cryptocurrency exchanges, Web3, or related industries. An operations or DevOps engineering background, particularly experience transitioning from infrastructure or operations into cloud security. Benefits: Monthly compensation of USD 4,000–6,000 , paid over 13 months. Additional performance-based bonus. Permanent, full-time employment. Fully remote working arrangement, with no specific time-zone restriction. Opportunity to contribute to the security infrastructure of a global organization operating across multiple regions.