Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 72 days ago

AWS Security Subject Matter Expert (SME)

Minfy Technologies92 open roles

Where
Delhi
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAWS Security Subject Matter Expert (SME)Minfy Technologies · Delhi

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Minfy Technologies's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 72 days ago

The posting

Job Description: AWS Security Subject Matter Expert (SME)

Role Summary

The AWS Security Subject Matter Expert (SME) will serve as the go-to technical expert for security architecture, governance, compliance, and operational security posture across Minfy's AWS environments. This individual brings deep, hands-on expertise in AWS-native security services and best practices, advising on secure configurations, driving remediation of security gaps, enabling DevSecOps practices, and ensuring secure, compliant, and resilient AWS operations for both Minfy-managed and customer-managed environments.

The individual will work closely with SRE, Cloud Engineering, FinOps, Product Engineering, AI/ML teams, Customer Success, and Strategic Account teams, providing AWS security subject matter expertise to embed security into every aspect of cloud service delivery.

Key Responsibilities

AWS Security Architecture & Best Practices

  • Define and maintain enterprise security architecture standards for AWS, serving as the subject matter expert on AWS-native security services and configurations. Develop secure AWS Landing Zones (AWS Control Tower, Organizations), reference architectures, and security guardrails. Establish architecture patterns for: AWS multi-account/multi-region deployments Hybrid cloud environments (AWS to on-premises) SaaS platforms AI/ML workloads (SageMaker, Bedrock) Kubernetes platforms (Amazon EKS) Review and approve security designs for new cloud initiatives and customer engagements. Drive Zero Trust Architecture adoption across AWS environments.

AWS Security Engineering & DevSecOps

  • Embed security controls into CI/CD and Infrastructure-as-Code pipelines. Implement Security-as-Code and Policy-as-Code frameworks. Automate compliance validation and security posture assessments. Establish secure software supply chain controls. Drive secure container, Kubernetes, and serverless security practices. Integrate automated vulnerability and misconfiguration detection into engineering workflows.

Security Operations & Threat Management

  • Define and oversee cloud security monitoring, detection, and response capabilities. Establish AWS-native threat detection strategies using GuardDuty, Security Hub, and Detective. Lead security incident response and forensic investigations. Drive vulnerability management programs across AWS environments (Amazon Inspector, ECR scanning). Implement cloud-native threat intelligence and proactive threat hunting capabilities. Develop operational runbooks and security response automation.

Governance, Risk & Compliance

  • Develop cloud security governance frameworks and policies. Establish cloud risk management and control assessment processes. Lead compliance initiatives including: ISO 27001 SOC 2 PCI DSS GDPR HIPAA NIST CSF CIS Benchmarks Support customer security reviews and regulatory audits. Build continuous compliance monitoring capabilities.

Identity, Access & Data Security

  • Define enterprise IAM strategy for AWS, including IAM, AWS Organizations, and AWS IAM Identity Center. Implement Zero Trust and least-privilege access models. Standardize: MFA SSO Federated Identity Privileged Access Management Lead secrets management (AWS Secrets Manager) and encryption strategy (AWS KMS). Define enterprise data classification and protection controls.

AI & Emerging Security

  • Secure GenAI and AI/ML platforms deployed in cloud environments. Establish governance controls for AI workloads. Define security standards for LLM deployments and AI-assisted operations. Assess risks associated with AI services and third-party integrations. Collaborate with AI engineering teams to implement secure AI architectures.

SME & Collaboration Responsibilities

  • Serve as the AWS security subject matter expert within the Cloud Security Center of Excellence in SRE. Provide technical guidance and mentorship to Cloud Security Engineers and Security Analysts on AWS best practices. Partner with Strategic Account Directors, TAMs, Cloud Architects, and Delivery Leaders. Provide technical reporting and recommendations on AWS security posture, risks, and remediation plans. Support customer-facing security discussions and solution reviews.

Required Qualifications

  • 10–14+ years of experience in Infrastructure, Cloud, Security, or SRE domains. Minimum 6+ years of hands-on AWS security experience. Demonstrated depth as a go-to AWS security subject matter expert (team leadership experience not required). Deep, hands-on expertise across AWS security services (IAM, GuardDuty, Security Hub, KMS, Macie, Inspector, Control Tower, Organizations); working knowledge of Azure or GCP is a plus. Strong understanding of: Cloud-native architectures Kubernetes DevSecOps Identity Security Compliance frameworks Security Operations Experience supporting enterprise-scale SaaS environments. Strong customer-facing and consulting capabilities.

Mandatory Technical Skills

Candidates must demonstrate hands-on, working knowledge of the following:

  • AWS Web Application Firewall (AWS WAF) Amazon Athena (for security log analytics and querying) AWS Security Hub Amazon GuardDuty Amazon Inspector CIS Benchmarks NIST Cybersecurity Framework (NIST CSF) ISO 27001

Preferred Certifications

  • AWS Certified Security – Specialty AWS Solutions Architect Professional AWS Certified Advanced Networking – Specialty AWS Certified DevOps Engineer – Professional CISSP CCSP CISM CKS (Certified Kubernetes Security Specialist)

Success Metrics (KPIs)

  • Reduction in critical cloud security findings. Cloud Security Posture Management (CSPM) score improvement. Compliance audit pass rates. Security incident reduction. MTTD and MTTR improvements. Percentage of infrastructure compliant by default. Vulnerability remediation SLA adherence. Customer security audit success rate. Security automation coverage across AWS environments.

Reporting Structure

Reports To: Delivery Leader

Manages: Individual contributor / SME role — no direct reports; provides technical guidance to Cloud Security Engineers, Security Analysts, DevSecOps Engineers, and Security Compliance Specialists

This role becomes the AWS security subject matter expert within the SRE organization, partnering with leaders for Cloud Operations, FinOps, Platform Engineering, Observability, and Automation to ensure secure and compliant operations across AWS customer environments.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Minfy Technologies's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Minfy Technologies's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Minfy Technologies's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.