AWS Security Analyst L2 Job Description
- Job Title: AWS Security Analyst L2
- Experience: 3-6 Years
- Domain: Cloud Security Operations (AWS)
Role Summary
The AWS Security Analyst L2 is responsible for monitoring, investigating, and responding to security threats across AWS cloud environments. The role focuses on operational security, incident analysis, GuardDuty monitoring, Security Hub findings management, WAF administration, DDoS protection, and cloud security compliance.
Security Monitoring & Incident Response
- Monitor AWS Security Hub, GuardDuty, CloudTrail, and CloudWatch alerts.
- Investigate security incidents and suspicious activities.
- Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Perform incident triage and escalation.
- Support containment and remediation activities.
AWS Security Operations
- Manage and review Security Hub findings.
- Investigate GuardDuty threat detections.
- Monitor CloudTrail logs for anomalous activities.
- Validate security events and eliminate false positives.
- Support vulnerability remediation activities.
Web Application Security
- Administer AWS WAF policies and rule sets.
- Manage IP reputation and geo-blocking rules.
- Create custom WAF rules for application protection.
- Analyze application-layer attack patterns.
DDoS Protection
- Monitor AWS Shield Standard and Shield Advanced.
- Investigate DDoS attack alerts and traffic anomalies.
- Coordinate mitigation efforts with infrastructure teams.
- Support incident reporting and post-incident analysis.
Compliance & Governance
- Support CIS AWS Benchmark compliance.
- Assist in cloud security audits.
- Review security posture and compliance findings.
- Support regulatory requirements such as ISO27001, SOC2, GDPR.
AWS Security Analyst L2 Job Description
- Job Title: AWS Security Analyst L2
- Experience: 3-6 Years
- Domain: Cloud Security Operations (AWS)
Role Summary
The AWS Security Analyst L2 is responsible for monitoring, investigating, and responding to security threats across AWS cloud environments. The role focuses on operational security, incident analysis, GuardDuty monitoring, Security Hub findings management, WAF administration, DDoS protection, and cloud security compliance.
Key Responsibilities
Security Monitoring & Incident Response
- Monitor AWS Security Hub, GuardDuty, CloudTrail, and CloudWatch alerts.
- Investigate security incidents and suspicious activities.
- Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Perform incident triage and escalation.
- Support containment and remediation activities.
AWS Security Operations
- Manage and review Security Hub findings.
- Investigate GuardDuty threat detections.
- Monitor CloudTrail logs for anomalous activities.
- Validate security events and eliminate false positives.
- Support vulnerability remediation activities.
Web Application Security
- Administer AWS WAF policies and rule sets.
- Manage IP reputation and geo-blocking rules.
- Create custom WAF rules for application protection.
- Analyze application-layer attack patterns.
DDoS Protection
- Monitor AWS Shield Standard and Shield Advanced.
- Investigate DDoS attack alerts and traffic anomalies.
- Coordinate mitigation efforts with infrastructure teams.
- Support incident reporting and post-incident analysis.
Compliance & Governance
- Support CIS AWS Benchmark compliance.
- Assist in cloud security audits.
- Review security posture and compliance findings.
- Support regulatory requirements such as ISO27001, SOC2, GDPR.
Required Skills
AWS Security Services
AWS Security Hub
AWS GuardDuty
AWS WAF
AWS Shield
AWS CloudTrail
AWS Config
AWS Inspector
Amazon Macie
Security Operations
Incident Response
Threat Hunting
Vulnerability Management
Log Analysis
MITRE ATT&CK
Scripting
Python
PowerShell
AWS CLI
Preferred Certifications
AWS Certified Security Specialty
AWS Solutions Architect Associate
CompTIA Security+
CEH
SC-200
AWS Security Analyst L2 Job Description
- Job Title: AWS Security Analyst L2
- Experience: 3-6 Years
- Domain: Cloud Security Operations (AWS)
Role Summary
The AWS Security Analyst L2 is responsible for monitoring, investigating, and responding to security threats across AWS cloud environments. The role focuses on operational security, incident analysis, GuardDuty monitoring, Security Hub findings management, WAF administration, DDoS protection, and cloud security compliance.
Key Responsibilities
Security Monitoring & Incident Response
- Monitor AWS Security Hub, GuardDuty, CloudTrail, and CloudWatch alerts.
- Investigate security incidents and suspicious activities.
- Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Perform incident triage and escalation.
- Support containment and remediation activities.
AWS Security Operations
- Manage and review Security Hub findings.
- Investigate GuardDuty threat detections.
- Monitor CloudTrail logs for anomalous activities.
- Validate security events and eliminate false positives.
- Support vulnerability remediation activities.
Web Application Security
- Administer AWS WAF policies and rule sets.
- Manage IP reputation and geo-blocking rules.
- Create custom WAF rules for application protection.
- Analyze application-layer attack patterns.
DDoS Protection
- Monitor AWS Shield Standard and Shield Advanced.
- Investigate DDoS attack alerts and traffic anomalies.
- Coordinate mitigation efforts with infrastructure teams.
- Support incident reporting and post-incident analysis.
Compliance & Governance
- Support CIS AWS Benchmark compliance.
- Assist in cloud security audits.
- Review security posture and compliance findings.
- Support regulatory requirements such as ISO27001, SOC2, GDPR.
Required Skills
AWS Security Services
AWS Security Hub
AWS GuardDuty
AWS WAF
AWS Shield
AWS CloudTrail
AWS Config
AWS Inspector
Amazon Macie
Security Operations
Incident Response
Threat Hunting
Vulnerability Management
Log Analysis
MITRE ATT&CK
Scripting
Python
PowerShell
AWS CLI
Preferred Certifications
AWS Certified Security Specialty
AWS Solutions Architect Associate
CompTIA Security+
CEH
SC-200
Job description provided by Zensar.
View the original posting
