Security Architect Cloud & AWS

NEORIS is a Digital accelerator that helps companies enter the future, having 20 years of experience as Digital Partners of some of the largest companies in the world. We have more than 4,000 professionals in 11 countries, with our multicultural startup culture where we cultivate innovation, continuous learning to create high-value solutions for our clients.

We are looking for a Senior Security Architect (Clowd & AWS) to lead the closure of AWS cybersecurity remediation tickets and subsequently operating as the account's permanent security lead for ongoing operations and cloud security governance.

The profile will own the security posture of a multi-account AWS environment, coordinate with global cybersecurity team, and ensure that all controls remain audit-ready on an ongoing basis.

Required Profile:

• 10+ years of professional experience in cybersecurity, cloud security, or information security roles

• Minimum 5 years of hands-on experience with AWS security services (GuardDuty, Security Hub, IAM, Secrets Manager, Inspector, CloudTrail, AWS Config)

• Demonstrated experience leading security remediation projects in regulated environments (banking, healthcare, or FMCG preferred)

• Experience working with audit frameworks and generating audit evidence packages (ISO 27001, SOC 2, or equivalent)

• Prior experience in client-embedded or staff augmentation roles is a strong plus

Technical Skills — Required

• AWS: IAM, GuardDuty, Security Hub, Inspector, CloudTrail, Secrets Manager, AWS Config, AWS Backup, Transfer Family

• EC2 and Elastic Beanstalk: platform management, Amazon Linux migration, patch management

• Encryption: KMS, RDS encryption at rest, S3 server-side encryption, certificate management

• Network security: Security Groups, NACLs, VPC architecture, WAF, NLB/ALB security

• Identity: SSO (AWS IAM Identity Center), MFA enforcement, privilege management (PAM)

• Threat frameworks: MITRE ATT&CK, STRIDE, NIST CSF, Zero Trust principles

• Security monitoring: SIEM integration (Splunk preferred), log aggregation, alert triage

Technical Skills — Desirable

• Qualys or equivalent vulnerability management tooling

• Endpoint Detection and Response (EDR/XDR) platforms

• IaC security scanning (Checkov, tfsec, or equivalent)

• DevSecOps practices: pipeline security gates, SAST/DAST integration

• Multi-cloud exposure (GCP or Azure) as secondary environment

• Advanced Level of English

•

Soft Skills & Mindset

• Autonomous and structured — able to manage multiple work streams without day-to-day supervision

• Strong written and verbal communication in English (minimum B2), with experience in weekly client-facing reporting.

• Comfortable operating in ambiguous, fast-paced environments with competing priorities

• Security-first mindset: able to say no and explain why, without blocking business delivery

• Collaborative: works effectively with infrastructure engineers, DevOps teams, and client-side stakeholders

Education

• Bachelor's degree in Systems Engineering, Computer Science, or related field — required

• Master's degree or postgraduate specialization in Cybersecurity — strongly preferred

Certifications — Required (at least one)

• AWS Certified Security – Specialty

• AWS Certified Solutions Architect – Professional

• CISSP (Certified Information Systems Security Professional)

Certifications — Desirable

• ISO 27001 Lead Implementer or Lead Auditor

• CISM (Certified Information Security Manager)

• CompTIA Security+ or equivalent baseline

• CEH, OSCP, or offensive security certifications

We offer:

• Statutory & Major benefits

• Personal Growth

• Competitive salary

• Attractive benefits plan

Come and meet us on: http://www.neoris.com, on Facebook, LinkedIn, Twitter, or Instagram @NEORIS.

Marina Molina

LI-MM3