Title:  Information Security Analyst II

Job Purpose

The AWS Cloud Security Engineer is responsible for designing, implementing, and monitoring security within AWS cloud environments. The focus is on data protection, infrastructure hardening, and automating compliance processes. This role ensures the security of Identity and Access Management (IAM), networking (VPC), key encryption (KMS), and the development of security guardrails using Infrastructure as Code (IaC) tools such as Terraform and CloudFormation. The engineer will implement and maintain AWS cloud security controls across the bank’s AWS environment, support AWS Control Tower, and collaborate with platform, DevOps, and application teams to ensure security-by-design.

Job Responsibilities

• Design and deploy secure, scalable AWS solutions, including VPC design, subnetting, and security group configurations.
• Implement least-privilege IAM policies, manage roles and user access, including SSO.
• Use Terraform, AWS CloudFormation, or Python to automate security checks and deploy infrastructure, integrating security into CI/CD pipelines (DevSecOps).
• Utilise AWS native tools such as CloudWatch, CloudTrail, AWS Config, GuardDuty, and Security Hub for real-time monitoring and threat identification.
• Ensure compliance with standards including PCI DSS, ISO 27001, and NIST frameworks, and remediate compliance against security standards and regulations.
• Participate in security incident response and vulnerability management.
• Maintain detective controls (logging, monitoring, alerting) using AWS services (CloudTrail, GuardDuty, Security Hub, Config, CloudWatch).
• Secure network design, firewall/WAF configuration, VPC security, vulnerability management, and baseline enforcement.
• Protect data with encryption, secure key management, backups, and monitoring.
• Manage secrets (AWS Secrets Manager, Parameter Store), including rotation and credential protection.
• Support and enhance AWS Control Tower landing zone and security baselines.
• Contribute to new initiatives and ongoing AWS environment support.
• Embed security-by-design into cloud architectures and DevSecOps pipelines.

Job Responsibilities Continue

People Specification

Essential Qualifications - NQF Level

Preferred Qualification

Bachelor’s degree in computer science, Engineering, or equivalent experience.

• AWS Certifications: AWS Certified Security – Specialty or AWS Certified DevOps Engineer – Professional.

Essential Certifications

Preferred Certifications

Relevant Information Security Certification 

Minimum Experience Level

• 4+ years in IT, cloud, or security engineering roles.
• 2+ years securing AWS, preferably multi-account setups.
• Practical experience with AWS security services and Infrastructure as Code (Terraform/CloudFormation).
•  Experience in regulated or financial services environments preferred.
• Strong collaboration across technical teams for project and operational support.
• CloudFlare skills will be advantageous

Technical / Professional Knowledge

Behavioural Competencies