EY TC-CS-Cyber Architecture OT Engineering-SAAS-Senior 

India, Telangana, Hyderabad 

991573107

Responsibilities:

• Conduct regular risk assessments and vulnerability scans on SaaS applications.
• Identify and prioritize security risks, and work with relevant teams to implement mitigations.
• Track and manage security incidents and work on their resolution and prevention.
• Collaborate with IT, DevOps, and application development teams to integrate security controls into the software development lifecycle.
• Implement tools and frameworks for continuous monitoring and improvement of the security posture.
• Working Experience on tools Wiz, Prisma for security posture management
• Monitor the security configurations of SaaS applications to ensure they align with best practices and industry standards.
• identify potential security vulnerabilities within SaaS applications and prioritize remediation efforts based on risk severity.
• Ensure that SaaS applications comply with relevant regulations and standards (e.g., GDPR, HIPAA, SOC 2).

Required:

• Minimum of 3 years of IT experience
• At least 2+ years of specialization in cloud and Saas Security.
• Experience using or fixing vulnerabilities various SaaS security tools.
• Cloud Security certification for AWS/Azure/GCP
• Good Understanding of regulations and standards (e.g., GDPR, HIPAA, SOC 2).
• Experience in vulnerability and access management.

Preferred:

• Strong knowledge of relevant Security Standards (OWASP) and how to apply them to the software development lifecycle in a large agile environment.
• Conduct regular reviews and updates of security policies, procedures, and controls to adapt to new threats and changes in the environment.
• Experience in SSPM tools integration with other security solutions, such as SIEM (Security Information and Event Management)
• Good understanding of SaaS security baselines.
• Knowledge of CSPM tool Adaptive shield

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.