AWS Security Specialist.

Accountabilities:

• Design and implement defense-in-depth security architecture across AWS environments.

• Strengthen VPC network security through Security Groups, Network Access Control Lists (NACLs), PrivateLink, and secure connectivity configurations.

• Implement and maintain least-privilege IAM controls and data encryption strategies.

• Own the security of Amazon EKS environments, including infrastructure hardening, Kubernetes Network Policies, and IAM Roles for Service Accounts (IRSA).

• Establish and maintain container image scanning workflows and improve container security practices.

• Build real-time security monitoring, logging, and alerting systems using CloudWatch, CloudTrail, GuardDuty, and Security Hub.

• Participate in security incident response, investigate potential threats, and coordinate remediation activities.

• Serve as the technical point of contact between operations teams and the central enterprise security function.

• Translate security policies, ISO 27001 and SOC 2 requirements, and internal audit findings into actionable technical architecture and engineering controls.

• Conduct threat modeling, identify architectural vulnerabilities, and drive security remediation across teams.

• Champion Security as Code practices by automating infrastructure compliance, auditing, and remediation through Terraform or CloudFormation.

Requirements:

• 3–5+ years of hands-on AWS experience, with a strong understanding of the AWS Shared Responsibility Model.

• Advanced knowledge of Kubernetes and Amazon EKS security operations, including storage security, runtime protection, and container network isolation.

• Deep understanding of AWS VPC architecture, including hybrid cloud connectivity through Transit Gateway and VPN, as well as CDN and WAF deployment.

• Proficiency with CloudWatch for log analysis, metrics monitoring, and automated alerting.

• Strong scripting skills in at least one of Python, Go, or Bash, with the ability to develop automation scripts for security and operations tasks.

• Experience working with security, compliance, or audit teams, and the ability to translate regulatory and compliance requirements into engineering solutions.

• Ability to independently perform threat modeling and identify security risks in system architecture.

• Strong technical documentation, problem-solving, and cross-functional communication skills.

• Mandarin communication ability for daily collaboration and meetings, along with English reading and writing proficiency.

Nice to have:

• AWS Certified Security – Specialty certification.

• Certified Kubernetes Security Specialist (CKS) certification.

• DevSecOps implementation experience, including integrating security tools into CI/CD pipelines, such as Snyk, Prisma Cloud, or Trivy.

• Experience with Infrastructure as Code tools such as Terraform or AWS CDK.

• Previous experience in cryptocurrency exchanges, Web3, or related industries.

• An operations or DevOps engineering background, particularly experience transitioning from infrastructure or operations into cloud security.

Benefits:

• Monthly compensation of USD 4,000–6,000, paid over 13 months.

• Additional performance-based bonus.

• Permanent, full-time employment.

• Fully remote working arrangement, with no specific time-zone restriction.

• Opportunity to contribute to the security infrastructure of a global organization operating across multiple regions.