AWS Security & Cloud Platform Consultant

Location: London, UK – Hybrid (2–3 days/week onsite)

Duration: 3 Months

Contract Type: Contract

Role Overview

We are seeking an experienced AWS Security & Cloud Platform Consultant to support a large-scale security and bot mitigation initiative. The role will focus on designing and implementing AWS-native security controls, traffic analytics, observability, automation, and AI-assisted security capabilities using Infrastructure as Code.

Key Responsibilities

Cloud Security & Edge Protection

- Design and implement AWS WAF, CloudFront, and Shield Advanced security solutions.
- Configure WAF rules, rate limiting, traffic classification, and bot mitigation.
- Implement layered controls to detect and mitigate malicious traffic.
- Optimise edge caching to improve performance and reduce costs.

Infrastructure & Automation
- Develop IaC using AWS CDK, CloudFormation, or Terraform.
- Integrate solutions with Git-based repositories and CI/CD pipelines.
- Build reusable deployment templates, automation scripts, and runbooks.
- Support deployment and production release activities.

Observability & Analytics
- Implement logging pipelines using WAF Logs, Kinesis Firehose, S3, Athena, and CloudWatch.
- Develop analytics queries, dashboards, KPIs, alerts, and monitoring solutions.
- Analyse traffic patterns and identify security and cost optimisation opportunities.

Bot Detection & Threat Intelligence
- Perform traffic profiling and behavioural analysis.
- Analyse API usage, fingerprinting, client patterns, token adoption, and anomalies.
- Measure detection effectiveness, false positives, and operational impact.
- Prepare security evidence packs and governance documentation.





AI & Security Automation
- Develop AI-assisted security and operational workflows.
- Build automated analysis and recommendation capabilities using AWS services.
- Implement governance guardrails, audit controls, and kill-switch mechanisms.
- Support autonomous/semi-autonomous security response workflows.

Stakeholder Engagement
- Collaborate with Security, Platform Engineering, SRE, Development, Architecture, and Governance teams.
- Lead technical workshops and design reviews.
- Prepare executive-level reports and decision-gate documentation.

Required Skills AWS & Security
- AWS WAF, CloudFront, Shield Advanced
- S3, Athena, CloudWatch, Kinesis Firehose, Lambda
- API Security, DDoS Protection, IAM
- Web Application Security & Bot Management
- Network Security Architecture

Cloud Engineering
- AWS CDK, CloudFormation, Terraform
- CI/CD and Git-based development
- Infrastructure Automation

Data & Analytics
- SQL / Amazon Athena
- Log Analytics & Threat Detection
- Data Visualisation
- KPI & Operational Reporting

Preferred Qualifications
- AWS Certified Security – Specialty
- AWS Certified Solutions Architect – Professional
- AWS Advanced Networking certification
- Experience delivering enterprise-scale AWS security transformation initiatives.
- Experience in regulated environments.
- Exposure to AIOps, security analytics, and automated remediation.

Success Measures
- Effective implementation of AWS security and observability controls.
- Reduction in malicious traffic reaching origin services.
- Demonstrable security and infrastructure cost optimisation.
- Delivery of operational dashboards, evidence packs, and documentation.
- Successful knowledge transfer and transition to operational teams.

📌 AWS Security & Cloud Platform Consultant (Barcelona)
🏢 iXceed Solutions
📍 Barcelona