Looking for a job

BONN GWAABE

@bonngwaabe

Senior Cloud Security Engineer at Amazon who engineered remediation that cut containment time from about 1 hour to under 1 minute.

United States

Message

At Amazon, I secure cloud workloads across Azure, AWS, and GCP, and engineered a Step Functions auto-remediation platform that cut containment time from about 1 hour to under 1 minute.

I also led a Wiz deployment across the three cloud platforms and built security-hardened Terraform modules with CI/CD scanning. Earlier at Chime, I built an AWS security baseline adopted org-wide and supported PCI-DSS assessments.

Experience

Work history, roles, and key accomplishments

Current

Senior Cloud Security Engineer

Current

Amazon

Apr 2021 - Present (5 years 6 months)

Designs and implements Azure, AWS, and GCP security for IaaS and PaaS workloads, including Entra ID, Conditional Access, and Key Vault. Led Wiz CSPM deployment, enforced guardrails with SCPs and Azure Policy, and built reusable Terraform modules with CI/CD security scanning.

Cloud Security Engineer

Chime

Jan 2018 - Oct 2020 (2 years 9 months)

Maintained PCI-DSS scope reduction and passed two consecutive QSA assessments. Built AWS security baseline, rolled out Config conformance packs with auto remediation, and ran enterprise vulnerability program with Splunk dashboards.

AWS VPC IAM KMS Security Hub GuardDuty Inspector Amazon Macie AWS Config Python Splunk Qualys Tenable PCI DSS CIS Benchmarks

Security Analyst

UnitedHealth Group

Jul 2016 - Dec 2017 (1 year 5 months)

Monitored and triaged SIEM alerts, contributed to IR playbook development aligned to NIST and CIS frameworks, and ran Qualys scans for HIPAA and HITRUST evidence.

SIEM Incident Response Qualys HIPAA HITRUST NIST CIS Benchmarks