{"id":3624590,"url":"https://alion.io/job/zensar-technologies-cloud-security-aws-sr-security-analyst","title":"Cloud Security - AWS Sr Security Analyst","company":{"id":59576,"name":"Zensar Technologies","domain":"zensar.com","url":"https://alion.io/company/zensar-technologies","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":92,"open_postings":49,"ghost_share":0.082,"stale_share":0.082,"repost_share":0.388,"time_to_fill_p50_days":6,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon EventBridge","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"AWS Step Functions","optional":false},{"name":"AWS WAF","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-02T15:52:23Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T05:34:43Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"AWS Security Analyst L2 Job Description\nJob Title: AWS Security Analyst L2\nExperience: 3-6 Years\nDomain: Cloud Security Operations (AWS)\nRole Summary\nThe AWS Security Analyst L2 is responsible for monitoring, investigating, and responding to security threats across AWS cloud environments. The role focuses on operational security, incident analysis, GuardDuty monitoring, Security Hub findings management, WAF administration, DDoS protection, and cloud security compliance.\nKey Responsibilities\nSecurity Monitoring & Incident Response\nMonitor AWS Security Hub, GuardDuty, CloudTrail, and CloudWatch alerts.\nInvestigate security incidents and suspicious activities.\nAnalyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).\nPerform incident triage and escalation.\nSupport containment and remediation activities.\nAWS Security Operations\nManage and review Security Hub findings.\nInvestigate GuardDuty threat detections.\nMonitor CloudTrail logs for anomalous activities.\nValidate security events and eliminate false positives.\nSupport vulnerability remediation activities.\nWeb Application Security\nAdminister AWS WAF policies and rule sets.\nManage IP reputation and geo-blocking rules.\nCreate custom WAF rules for application protection.\nAnalyze application-layer attack patterns.\nDDoS Protection\nMonitor AWS Shield Standard and Shield Advanced.\nInvestigate DDoS attack alerts and traffic anomalies.\nCoordinate mitigation efforts with infrastructure teams.\nSupport incident reporting and post-incident analysis.\nCompliance & Governance\nSupport CIS AWS Benchmark compliance.\nAssist in cloud security audits.\nReview security posture and compliance findings.\nSupport regulatory requirements such as ISO27001, SOC2, GDPR.\nRequired Skills\nAWS Security Services\nAWS Security Hub\nAWS GuardDuty\nAWS WAF\nAWS Shield\nAWS CloudTrail\nAWS Config\nAWS Inspector\nAmazon Macie\nSecurity Operations\nIncident Response\nThreat Hunting\nVulnerability Management\nLog Analysis\nMITRE ATT&CK\nScripting\nPython\nPowerShell\nAWS CLI\nPreferred Certifications\nAWS Certified Security Specialty\nAWS Solutions Architect Associate\nCompTIA Security+\nCEH\nSC-200\nAWS Security Analyst L3 / Senior AWS Security Engineer\nJob Title: Senior AWS Security Engineer / AWS Security Analyst L3\nExperience: 7-12+ Years\nRole Summary\nThe AWS Security L3 Engineer serves as the senior technical escalation point responsible for designing, implementing, automating, and improving cloud security controls across AWS environments. The role leads threat detection, security architecture, WAF engineering, DDoS defense strategy, cloud incident response, and security governance initiatives.\nKey Responsibilities\nCloud Security Architecture\nDesign secure AWS cloud architectures.\nImplement cloud-native security controls.\nDevelop AWS security standards and best practices.\nLead cloud security transformation initiatives.\nAdvanced Threat Detection\nLead investigations involving GuardDuty findings.\nPerform cloud threat hunting and forensic investigations.\nAnalyze advanced attack techniques and cloud-based threats.\nDevelop detection engineering use cases.\nAWS Security Hub & Governance\nDesign centralized cloud security monitoring architecture.\nConfigure Security Hub standards and frameworks.\nAutomate compliance monitoring and remediation.\nIntegrate findings with SIEM and SOAR platforms.\nAWS WAF Engineering\nArchitect enterprise WAF solutions.\nDevelop custom WAF managed rules.\nProtect APIs, web applications, and microservices.\nOptimize rule performance and attack detection capabilities.\nDDoS Strategy & Protection\nManage AWS Shield Advanced deployment.\nLead DDoS preparedness and mitigation planning.\nAnalyze Layer 3, Layer 4, and Layer 7 attack patterns.\nCoordinate with AWS support during large-scale attacks.\nSecurity Automation\nDevelop security automation using: AWS Lambda\nPython\nCloudFormation\nTerraform\nAWS EventBridge\nStep Functions\n\nIdentity & Access Security\nDesign IAM policies and governance controls.\nImplement least-privilege access models.\nManage AWS Organizations and SCPs.\nSupport SSO and federated identity integrations.\nDevSecOps & Container Security\nSecure CI/CD pipelines.\nSupport Kubernetes (EKS) security.\nPerform container image vulnerability assessments.\nIntegrate security into DevOps workflows.\nTechnical Skills (L3)\nAWS Security Services\nAWS Security Hub\nAWS GuardDuty\nAWS Shield Advanced\nAWS WAF\nAWS IAM\nAWS Organizations\nAWS Inspector\nAWS Macie\nAWS Config\nAWS Detective\nAWS CloudTrail\nAWS KMS\nSecrets Manager\nCloud & Container Security\nAWS Landing Zone\nEKS Security\nECS Security\nContainer Security\nKubernetes Security\nSecurity Engineering\nThreat Modeling\nSecurity Architecture\nDetection Engineering\nThreat Hunting\nIncident Response\nForensics\nAutomation & DevSecOps\nTerraform\nCloudFormation\nPython\nAWS Lambda\nCI/CD Security\nPreferred Certifications\nAWS Certified Security Specialty\nAWS Certified Solutions Architect Professional\nCISSP\nCCSP\nGIAC Cloud Security Certifications\nAzure AZ-500 (Optional)\nExecutive Comparison: AWS Security L2 vs L3\nAreaL2 AnalystL3 EngineerExperience3-6 Years7-12+ YearsSecurity Hub MonitoringGuardDuty Investigation AdvancedWAF AdministrationArchitecture & EngineeringAWS Shield MonitoringLead DDoS StrategyIncident ResponseOperationalTechnical LeadThreat HuntingBasicAdvancedCloud ForensicsLimitedAdvancedSecurity AutomationBasicAdvancedIAM GovernanceSupportDesign & GovernanceSecurity ArchitectureNoYesDevSecOps SecurityLimitedStrongIdeal Candidate Profile (L3)\nA senior cloud security professional with 7-12 years of security experience and 4+ years focused on AWS, possessing strong hands-on expertise in:\nAWS Security Hub\nAWS GuardDuty\nAWS WAF\nAWS Shield Advanced (DDoS Protection)\nAWS IAM & Organizations\nAWS Config & Inspector\nAWS Detective\nCloudTrail & Log Analytics\nSecurity Automation (Lambda, Python, Terraform)\nThreat Hunting & Incident Response\nContainer Security (EKS/Kubernetes)\nSIEM Integration (Microsoft Sentinel, Splunk, QRadar)\nThis profile is highly sought after by enterprise SOCs, MSSPs, banking, healthcare, and large-scale cloud operations teams supporting global AWS environments\nAWS Security Analyst L2 Job Description\nJob Title: AWS Security Analyst L2\nExperience: 3-6 Years\nDomain: Cloud Security Operations (AWS)\nRole Summary\nThe AWS Security Analyst L2 is responsible for monitoring, investigating, and responding to security threats across AWS cloud environments. The role focuses on operational security, incident analysis, GuardDuty monitoring, Security Hub findings management, WAF administration, DDoS protection, and cloud security compliance.\nKey Responsibilities\nSecurity Monitoring & Incident Response\nMonitor AWS Security Hub, GuardDuty, CloudTrail, and CloudWatch alerts.\nInvestigate security incidents and suspicious activities.\nAnalyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).\nPerform incident triage and escalation.\nSupport containment and remediation activities.\nAWS Security Operations\nManage and review Security Hub findings.\nInvestigate GuardDuty threat detections.\nMonitor CloudTrail logs for anomalous activities.\nValidate security events and eliminate false positives.\nSupport vulnerability remediation activities.\nWeb Application Security\nAdminister AWS WAF policies and rule sets.\nManage IP reputation and geo-blocking rules.\nCreate custom WAF rules for application protection.\nAnalyze application-layer attack patterns.\nDDoS Protection\nMonitor AWS Shield Standard and Shield Advanced.\nInvestigate DDoS attack alerts and traffic anomalies.\nCoordinate mitigation efforts with infrastructure teams.\nSupport incident reporting and post-incident analysis.\nCompliance & Governance\nSupport CIS AWS Benchmark compliance.\nAssist in cloud security audits.\nReview security posture and compliance findings.\nSupport regulatory requirements such as ISO27001, SOC2, GDPR.\nRequired Skills\nAWS Security Services\nAWS Security Hub\nAWS GuardDuty\nAWS WAF\nAWS Shield\nAWS CloudTrail\nAWS Config\nAWS Inspector\nAmazon Macie\nSecurity Operations\nIncident Response\nThreat Hunting\nVulnerability Management\nLog Analysis\nMITRE ATT&CK\nScripting\nPython\nPowerShell\nAWS CLI\nPreferred Certifications\nAWS Certified Security Specialty\nAWS Solutions Architect Associate\nCompTIA Security+\nCEH\nSC-200\nAWS Security Analyst L3 / Senior AWS Security Engineer\nJob Title: Senior AWS Security Engineer / AWS Security Analyst L3\nExperience: 7-12+ Years\nRole Summary\nThe AWS Security L3 Engineer serves as the senior technical escalation point responsible for designing, implementing, automating, and improving cloud security controls across AWS environments. The role leads threat detection, security architecture, WAF engineering, DDoS defense strategy, cloud incident response, and security governance initiatives.\nKey Responsibilities\nCloud Security Architecture\nDesign secure AWS cloud architectures.\nImplement cloud-native security controls.\nDevelop AWS security standards and best practices.\nLead cloud security transformation initiatives.\nAdvanced Threat Detection\nLead investigations involving GuardDuty findings.\nPerform cloud threat hunting and forensic investigations.\nAnalyze advanced attack techniques and cloud-based threats.\nDevelop detection engineering use cases.\nAWS Security Hub & Governance\nDesign centralized cloud security monitoring architecture.\nConfigure Security Hub standards and frameworks.\nAutomate compliance monitoring and remediation.\nIntegrate findings with SIEM and SOAR platforms.\nAWS WAF Engineering\nArchitect enterprise WAF solutions.\nDevelop custom WAF managed rules.\nProtect APIs, web applications, and microservices.\nOptimize rule performance and attack detection capabilities.\nDDoS Strategy & Protection\nManage AWS Shield Advanced deployment.\nLead DDoS preparedness and mitigation planning.\nAnalyze Layer 3, Layer 4, and Layer 7 attack patterns.\nCoordinate with AWS support during large-scale attacks.\nSecurity Automation\nDevelop security automation using: AWS Lambda\nPython\nCloudFormation\nTerraform\nAWS EventBridge\nStep Functions\n\nIdentity & Access Security\nDesign IAM policies and governance controls.\nImplement least-privilege access models.\nManage AWS Organizations and SCPs.\nSupport SSO and federated identity integrations.\nDevSecOps & Container Security\nSecure CI/CD pipelines.\nSupport Kubernetes (EKS) security.\nPerform container image vulnerability assessments.\nIntegrate security into DevOps workflows.\nTechnical Skills (L3)\nAWS Security Services\nAWS Security Hub\nAWS GuardDuty\nAWS Shield Advanced\nAWS WAF\nAWS IAM\nAWS Organizations\nAWS Inspector\nAWS Macie\nAWS Config\nAWS Detective\nAWS CloudTrail\nAWS KMS\nSecrets Manager\nCloud & Container Security\nAWS Landing Zone\nEKS Security\nECS Security\nContainer Security\nKubernetes Security\nSecurity Engineering\nThreat Modeling\nSecurity Architecture\nDetection Engineering\nThreat Hunting\nIncident Response\nForensics\nAutomation & DevSecOps\nTerraform\nCloudFormation\nPython\nAWS Lambda\nCI/CD Security\nPreferred Certifications\nAWS Certified Security Specialty\nAWS Certified Solutions Architect Professional\nCISSP\nCCSP\nGIAC Cloud Security Certifications\nAzure AZ-500 (Optional)\nExecutive Comparison: AWS Security L2 vs L3\nAreaL2 AnalystL3 EngineerExperience3-6 Years7-12+ YearsSecurity Hub MonitoringGuardDuty Investigation AdvancedWAF AdministrationArchitecture & EngineeringAWS Shield MonitoringLead DDoS StrategyIncident ResponseOperationalTechnical LeadThreat HuntingBasicAdvancedCloud ForensicsLimitedAdvancedSecurity AutomationBasicAdvancedIAM GovernanceSupportDesign & GovernanceSecurity ArchitectureNoYesDevSecOps SecurityLimitedStrongIdeal Candidate Profile (L3)\nA senior cloud security professional with 7-12 years of security experience and 4+ years focused on AWS, possessing strong hands-on expertise in:\nAWS Security Hub\nAWS GuardDuty\nAWS WAF\nAWS Shield Advanced (DDoS Protection)\nAWS IAM & Organizations\nAWS Config & Inspector\nAWS Detective\nCloudTrail & Log Analytics\nSecurity Automation (Lambda, Python, Terraform)\nThreat Hunting & Incident Response\nContainer Secu...","description_format":"text","description_chars":18350,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-11-02T19:31:19Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":6,"reasons":["conf:4","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/zensar-technologies-cloud-security-aws-sr-security-analyst","json_url":"https://alion.io/job/zensar-technologies-cloud-security-aws-sr-security-analyst.json","meta":{"generated_at":"2026-11-04T05:50:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9111,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59576},"rest":"https://alion.io/mcp/rest/get_company?id=59576"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzensar-technologies-cloud-security-aws-sr-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzensar-technologies-cloud-security-aws-sr-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzensar-technologies-cloud-security-aws-sr-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zensar-technologies-cloud-security-aws-sr-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzensar-technologies-cloud-security-aws-sr-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3624590}},{"tool":"search_jobs","arguments":{"company":"zensar.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3624590},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}