Cyber SDC - Cloud Senior Engineer (Image Security) - Senior - Consulting - Location Open

In an ever-evolving IT landscape, EY stands as a beacon of trust for clients across diverse industries seeking reliable solutions to address their intricate risks and vulnerabilities. As a vital member of our Cloud Security team, you will play a vital role in achieving this objective by empowering clients to comprehend and navigate their complex Enterprise Identity environments. Your expertise will be instrumental in evaluating, enhancing, and devising innovative solutions, processes, and policies to cater to each client's unique Cloud Security requirements. This is an opportunity to leverage both your technical prowess and business acumen to drive our mission and make a significant impact on global cybersecurity.

The opportunity 

The Cloud Security Senior Engineer will be responsible for designing, implementing, and managing security measures to protect our cloud infrastructure. This role involves working closely with various teams to ensure the security and compliance of our cloud environments, conducting risk assessments, and responding to security incidents.

At our core, our Cloud Security services play a pivotal role in assisting our clients to align security management strategy with business goals. This involves managing cloud security to resources and services, as well as enforcing business, privacy, and security policies. With the support of strategic alliances with third-party vendors, our experienced professionals offer a comprehensive suite of services, including strategy, assessment, testing, and implementation of Cloud Security solutions.

Your Key Responsibilities 

• Design and implement cloud security architectures and solutions.
• Monitor and manage security configurations for cloud services (e.g., AWS, Azure, Google Cloud).
• Conduct regular security assessments and audits of cloud environments.
• Collaborate with DevOps and IT teams to ensure secure deployment and management of cloud resources.
• Respond to and investigate security incidents and breaches in cloud environments.
• Implement and manage cloud security tools and technologies.
• Ensure compliance with relevant regulations and standards (e.g., GDPR, HIPAA, SOC 2).
• Provide guidance and training to internal teams on cloud security best practices.
• Keep current with cloud security trends, threats, and tech.

Skills and Attributes for Success 

• Deep understanding of cloud platforms such as AWS, Azure, and Google Cloud.
• Proficiency in cloud security tools and services offered by these platforms.
• Knowledge of cloud security best practices and industry standards.
• Ability to implement and manage security controls in cloud environments.
• Strong analytical and problem-solving skills.
• Ability to think critically and make data-driven decisions.
• Strong analytical and problem-solving skills.
• Ability to think critically and make data-driven decisions.
• Excellent documentation skills, including the creation of procedures, process documentation, and user documentation related to IAM applications.

To qualify for the role, you must have 

• Bachelor's degree in computer science, Information Security, or a related field.
• Minimum of [3] years of experience in cloud security or a related role.
• Strong knowledge of cloud platforms (AWS, Azure, Google Cloud) and their security features.
• Experience with cloud security tools such as CASB, CSPM, and SIEM.
• Familiarity with compliance frameworks and standards (e.g., GDPR, HIPAA, SOC 2).
• Strong understanding of network security, identity and access management, and encryption.
• Excellent problem-solving and analytical skills.
• Effective communication and collaboration skills.
• Relevant certifications such as CCSP, CISSP, AWS Certified Security Specialty, or equivalent are a plus.

Ideally, you would also have 

• Professional certifications in Identity & Access Management, such as CISSP, CISM, or specific vendor certifications like from AWS, Azure, and Google Cloud.
• Familiarity with additional cloud security technologies and tools, beyond cloud platforms, such as Wiz.io, Defender for Cloud, CrowdStrike, etc.
• Knowledge of cloud-based security solutions and experience working with cloud platforms like AWS, Azure, or Google Cloud.
• Exposure to cloud security guardrail automation, such as AWS SCP and Azure Policies.
• Understanding of regulatory compliance frameworks and industry standards related to IAM, such as GDPR, HIPAA, NIST, or ISO 27001.Prior experience in providing Cloud Security services to clients from various industries, demonstrating versatility and adaptability in addressing diverse challenges.
• Strong interpersonal and communication skills, with the ability to collaborate effectively with clients and cross-functional teams to present solution designs, options, and innovations.

What we look for 

We are interested in intellectually curious people with a genuine passion for cyber security. With your broad exposure across Cloud Security, we will turn to you to speak up with innovative new ideas that could make a lasting difference not only to us – but also to the industry at large. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you. 

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.