Partner with Cybersecurity on cloud security engineering: IAM, KMS encryption, secrets management, GuardDuty, Security Hub, AWS Config, vulnerability management, and SIEM (SIEMonster/Wazuh) integration; lead remediation of cloud security findings. Strong cloud security engineering knowledge: IAM design at scale, KMS and secrets management, GuardDuty/Security Hub/AWS Config, vulnerability management, and integration with enterprise SIEM platforms (Wazuh, Splunk, Sentinel, or comparable).