> Markdown version of [/jobs/ext/2490647-aws-security-consultant](https://www.wearedevelopers.com/jobs/ext/2490647-aws-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # AWS Security Consultant - **Company:** American IT Systems - **Location:** Greater London, UK - **Contract:** Temporary contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Amazon Cloudfront, Amazon S3, Data Analysis, Cloud Computing Security, Cloud Engineering, Data Visualization, DDoS Mitigation, Identity and Access Management, Intrusion Detection and Prevention, Network Security, Log Analysis, Release Management, Web Application Security, Software Engineering, SQL Databases, AWS Cdk, Data Logging, Software Repository, Software Security, Caching, AWS Lambda, Cyber Threat Analysis, Git, Cloudformation, Infrastructure Automation Frameworks, Data Analytics, Performance Monitor, Cloudwatch, Terraform, Security Orchestration, Automation & Response - **Published:** August 17, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5845374620 ## About the Role AWS Expertise * AWS WAF * Amazon CloudFront * AWS Shield Advanced * Amazon Athena * Amazon S3 * Amazon CloudWatch * Amazon Kinesis Firehose * AWS Lambda * API Security * Cost Optimisation Cloud Engineering * AWS CDK * CloudFormation * Terraform * CI/CD Pipelines * Git-based development workflows * Infrastructure Automation Security & Networking * Web Application Security * Bot Management * API Security * DDoS Protection * Identity & Access Management * Network Security Architecture Data & Analytics * SQL / Athena Query Development * Log Analytics * Threat Detection * Data Visualisation * KPI and Operational Reporting Preferred Qualifications * AWS Certified Security Specialty * AWS Certified Solutions Architect Professional * AWS Advanced Networking Certification * Experience delivering security transformation initiatives on AWS. * Experience working in regulated, enterprise-scale environments. * Familiarity with AI-driven operations (AIOps), security analytics, and autonomous remediation frameworks. Success Measures * Successful implementation of cloud security controls and observability capabilities. * Reduction in malicious traffic reaching origin services. * Demonstrated cost optimisation through edge security and caching strategies. * Delivery of executive-ready evidence packs and operational dashboards. * Successful transition to operational teams through documented runbooks and knowledge transfer. ## Description The role requires deep expertise in AWS networking, CloudFront, WAF, security automation, observability, large-scale log analytics, and cloud-native delivery practices., Cloud Security & Edge Protection * Design and implement AWS WAF and CloudFront-based protection architectures. * Configure managed rule sets, rate-limiting controls, traffic classification, and bot mitigation capabilities. * Implement layered security controls to identify and mitigate malicious traffic. * Build and optimize edge caching strategies to reduce origin load and operational costs. Infrastructure as Code & Platform Engineering * Develop Infrastructure as Code using AWS CDK, CloudFormation, or Terraform. * Contribute code through enterprise Git repositories and CI/CD pipelines. * Create reusable deployment templates, automation scripts, and operational runbooks. * Support deployment rehearsals and production release preparation. Observability & Analytics * Implement logging pipelines using: + AWS WAF Logs + Kinesis Firehose + Amazon S3 + Amazon Athena + CloudWatch * Develop scheduled analytics queries and reporting frameworks. * Establish operational dashboards, KPIs, alerting, and performance monitoring. * Analyse traffic patterns and produce security and cost optimisation insights. Bot Detection & Threat Intelligence * Develop traffic profiling and behavioural analysis models. * Analyse API usage, fingerprinting signals, client patterns, token adoption, and anomaly indicators. * Produce evidence packs for security reviews and governance gates. * Measure detection effectiveness, precision, false-positive rates, and operational impact. AI & Security Automation * Design and implement AI-assisted operational workflows. * Build automated analysis and recommendation loops using AWS native services. * Implement governance guardrails, kill-switch controls, and audit mechanisms. * Support autonomous or semi-autonomous security response workflows. Stakeholder Engagement * Work closely with: + Security teams + Platform Engineering + SRE teams + Application Development teams + Architecture and Governance forums * Prepare executive-level reports and decision-gate documentation. * Facilitate technical workshops and design reviews. ## Related Videos - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Building Reliable Serverless Applications with AWS CDK and Testing](https://www.wearedevelopers.com/videos/812-building-reliable-serverless-applications-with-aws-cdk-and-testing) - [HTTP headers that make your website go faster](https://www.wearedevelopers.com/videos/1676-http-headers-that-make-your-website-go-faster) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [The power of Cloud Development Kit (CDK): How to get the most out of it](https://www.wearedevelopers.com/videos/740-the-power-of-cloud-development-kit-cdk-how-to-get-the-most-out-of-it) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)