AWS Security Consultant

The role requires deep expertise in AWS networking, CloudFront, WAF, security automation, observability, large-scale log analytics, and cloud-native delivery practices., Cloud Security & Edge Protection

• Design and implement AWS WAF and CloudFront-based protection architectures.
• Configure managed rule sets, rate-limiting controls, traffic classification, and bot mitigation capabilities.
• Implement layered security controls to identify and mitigate malicious traffic.
• Build and optimize edge caching strategies to reduce origin load and operational costs.

Infrastructure as Code & Platform Engineering

• Develop Infrastructure as Code using AWS CDK, CloudFormation, or Terraform.
• Contribute code through enterprise Git repositories and CI/CD pipelines.
• Create reusable deployment templates, automation scripts, and operational runbooks.
• Support deployment rehearsals and production release preparation.

Observability & Analytics

• Implement logging pipelines using:
• AWS WAF Logs
• Kinesis Firehose
• Amazon S3
• Amazon Athena
• CloudWatch
• Develop scheduled analytics queries and reporting frameworks.
• Establish operational dashboards, KPIs, alerting, and performance monitoring.
• Analyse traffic patterns and produce security and cost optimisation insights.

Bot Detection & Threat Intelligence

• Develop traffic profiling and behavioural analysis models.
• Analyse API usage, fingerprinting signals, client patterns, token adoption, and anomaly indicators.
• Produce evidence packs for security reviews and governance gates.
• Measure detection effectiveness, precision, false-positive rates, and operational impact.

AI & Security Automation

• Design and implement AI-assisted operational workflows.
• Build automated analysis and recommendation loops using AWS native services.
• Implement governance guardrails, kill-switch controls, and audit mechanisms.
• Support autonomous or semi-autonomous security response workflows.

Stakeholder Engagement

• Work closely with:
• Security teams
• Platform Engineering
• SRE teams
• Application Development teams
• Architecture and Governance forums
• Prepare executive-level reports and decision-gate documentation.
• Facilitate technical workshops and design reviews.

AWS Expertise

• AWS WAF
• Amazon CloudFront
• AWS Shield Advanced
• Amazon Athena
• Amazon S3
• Amazon CloudWatch
• Amazon Kinesis Firehose
• AWS Lambda
• API Security
• Cost Optimisation

Cloud Engineering

• AWS CDK
• CloudFormation
• Terraform
• CI/CD Pipelines
• Git-based development workflows
• Infrastructure Automation

Security & Networking

• Web Application Security
• Bot Management
• API Security
• DDoS Protection
• Identity & Access Management
• Network Security Architecture

Data & Analytics

• SQL / Athena Query Development
• Log Analytics
• Threat Detection
• Data Visualisation
• KPI and Operational Reporting

Preferred Qualifications

• AWS Certified Security Specialty
• AWS Certified Solutions Architect Professional
• AWS Advanced Networking Certification
• Experience delivering security transformation initiatives on AWS.
• Experience working in regulated, enterprise-scale environments.
• Familiarity with AI-driven operations (AIOps), security analytics, and autonomous remediation frameworks.

Success Measures

• Successful implementation of cloud security controls and observability capabilities.
• Reduction in malicious traffic reaching origin services.
• Demonstrated cost optimisation through edge security and caching strategies.
• Delivery of executive-ready evidence packs and operational dashboards.
• Successful transition to operational teams through documented runbooks and knowledge transfer.