EY Cyber SDC- Secure Design Pattern Analyst - 

United States, Texas, Dallas 

258603639

Your Key Responsibilities

• Create and maintain design patterns documentation and playbooks
• Coordinate and streamline the processes to create, update, manage, and control design patterns. at clients.
• Engage with security architects, product owners, engineers, and subject matter resources to support new design patterns and updates to design patterns.
• Promote security best practices within discussions.
• Review and process design pattern service requests, ensuring timely resolution.
• Track and report the status of secure design pattern requests, provide regular updates on progress and outcomes.

Skills and Attributes for Success

• Proven experience writing technical documentation, standard operating procedures, policies, standards supporting the implementation of security controls and architecture patterns.
• Understanding and apply secure design concepts.
• Strong communication skills, with the ability to convey technical information in discussions and documentation.
• Knowledge of industry security frameworks and compliance standards and regulations (e.g., CMMC, NIST, ISO 27001, CIS, OWASP, TOGAF, SABSA, etc.)
• Familiarity with cloud security platforms (e.g., AWS, Azure) and cloud-native security controls.
• Basic understanding of authentication (OAuth, SAML, OpenID), authorization (RBAC, ABAC), and Zero Trust
• Understanding of encryption algorithms, key management, digital signatures, and PKI.
• Familiarity with SIEM, SOAR, XDR, log management, and anomaly detection.
• Familiarity with secure coding practices, DevSecOps, SAST/DAST tools, and software security design.
• Familiarity with firewalls, VPNs, TLS, micro-segmentation, and intrusion detection.
• Excellent problem-solving skills and the ability to manage multiple tasks effectively.
• Strong communication skills to collaborate with team members and stakeholders (e.g., business, information technology, product owners, cybersecurity.
• A track record of delivering high-quality client services and work products within expected timeframes.
• Ability to managing and maintain inventories of documentation

To qualify for the role you must have

• Understanding of security principles
• Bachelor’s degree in computer science, information technology, cybersecurity, technical writing, or a related field
• Proven experience in technical writing
• Hands on experience managing or working on a security architecture and/or GRC team
• Basic knowledge of cloud platforms (AWS, Azure) and their security features
• Knowledge of common industry security frameworks and regulations (e.g., CMMC, NIST, ISO 27001, CIS, OWASP, etc.)
• Knowledge of general security concepts and methods, such as security policy creation, enterprise security strategies, architectures, governance, vulnerability assessments, privacy assessments, intrusion detection, and incident response
• Experience in leading process definition, workflow design, and process mapping
• Experience in ServiceNow managing tickets and generating basic reports.

Ideally, you’d also have

• Professional certifications in cybersecurity, such as CISSP, CISM, or specific vendor certifications like from AWS, Azure, and Google Cloud.
• Hands on experience in cloud-based security solutions
• Prior experience as a security architect
• Experience in assessing compliance to regulations and standards
• Strong interpersonal and communication skills, with the ability to collaborate effectively with clients and cross-functional teams to present solution designs, options, and innovations.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.