EY TC-CS-Cyber Architecture-OT Engineering-CSPM-Senior 

India, Karnataka, Bengaluru 

641979872

JD : CSPM Security EnggResponsibilities:

• Continuously monitor and assess the security posture of cloud environments (e.g., Azure, AWS).
• Identify misconfigurations, vulnerabilities, and potential risks in cloud infrastructure and services.
• Implement and manage CSPM tools (e.g. WIZ, Defender for cloud) to automate the detection and remediation of security issues.
• Ensure cloud environments comply with industry standards and regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS).
• Develop and maintain cloud security policies, procedures, and documentation.
• Collaborate with IT and DevOps teams to implement security controls and best practices.
• Integrate CSPM solutions with existing security tools and systems.
• Evaluate and recommend new security tools and technologies to improve cloud security posture.
• Stay updated with the latest cloud security trends, threats, and technologies.
• Work closely with DevOps, IT, and application development teams to ensure secure cloud deployments.
• Communicate effectively with stakeholders about cloud security risks, incidents, and improvements.
• Develop and foster effective working relationships within both Security and IT teams to ensure that projects are delivered securely and on-time.

Required:

• Minimum of 3-5 years of IT and Cybersecurity experience
• At least 3+ years of specialization in Cybersecurity and CSPM tools (e.g. WIZ, Azure Defender, Prisma etc)
• At least 1+ Experience with programming languages such as Java, JavaScript, Python
• At least 2+ years of application development experience with backend development, Containerized applications
• At least 2+ Experience working with KQL query writing and implementing.
• Experience using or fixing vulnerabilities of various security tools.

Preferred:

• Experience with Azure Defender, WIZ, Prisma Cloud, KQL.
• Strong knowledge of relevant Security Standards (OWASP) and how to apply them to the software development lifecycle in a large agile environment.
• Experience performing security analysis on web applications and APIs.
• Experience working in any Cloud environment.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.