Security Engineer

Security Management & Compliance Engineer – Data & Cloud Engineering

Assistant Director

Today’s world is fueled by vast amounts of information, which means that data is even more valuable than ever before. Protecting data and information systems is central to doing business, and therefore everyone in EY Information Security has an important role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets. Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond when things go wrong. Together, the efforts of our dedicated team help protect the EY brand and build client trust.

Within Information Security we blend risk strategy, digital identity, cyber defence, application security and technology service solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through secure solutions and information systems.

The Opportunity

As a Security Engineer focused on Compliance, Vulnerability and SaaS technologies within Security Technology Services (STS), you will join a global team responsible for engineering, integrating and enhancing security data platforms that support EY’s multi-cloud and on-premises environments.

You will develop scalable data ingestion, integration, automation and analytics capabilities that provide centralized visibility across security, compliance, vulnerability management and operational technology platforms. Working across Azure, AWS and GCP, you will use modern cloud-native services and ETL frameworks to onboard, transform, enrich and analyze enterprise data.

The role will also design and support cloud-based data pipelines, automation solutions and reporting capabilities using Azure Data Factory, Azure Functions, Logic Apps, Databricks and SQL technologies to improve operational efficiency, data quality and decision-making.

You will support the implementation and ongoing management of SaaS applications and enterprise security technologies used by Information Security teams globally. This includes partnering with Security Architects, Service Delivery, Security Operations, Engineering teams and business stakeholders to deliver secure, scalable and data-driven solutions, while providing technical guidance for complex integrations.

Your Key Responsibilities

• Design and maintain enterprise-scale ETL/ELT processes and data integration frameworks for security, compliance, vulnerability, asset and operational data platforms.
• Build and support data ingestion, orchestration and automation solutions using Azure Data Factory, Azure Functions, Logic Apps and related Azure services.
• Collect, transform, validate, enrich and analyze data from enterprise systems, cloud platforms, APIs, SaaS applications and third-party technologies.
• Develop SQL-based data pipelines, database objects, stored procedures, data models, dashboards and reporting solutions for business, compliance and security needs.
• Partner with cross-functional teams to onboard data sources and deliver scalable integration, automation, reporting and analytics capabilities.
• Support enterprise data platforms through performance tuning, troubleshooting, monitoring, automation, upgrades, cloud migration, change management and continuous improvement.
• Maintain technical documentation, architecture diagrams, operational procedures, support runbooks and data flow documentation.
• Work across multi-cloud environments, with Microsoft Azure as the primary platform and exposure to AWS and/or Google Cloud Platform.

Desirable:

• Experience with Azure Databricks, data warehousing, data lake architectures and cloud-native data platforms for large-scale transformation and analytics.
• Exposure to Microsoft SQL Server technologies including SSDT, SSRS, SSIS, relational databases, stored procedures and reporting frameworks.
• Experience developing REST API integrations and consuming web services for enterprise data onboarding and automation.
• Familiarity with Infrastructure-as-Code, DevOps, CI/CD, cloud automation and deployment automation practices.
• Experience with vulnerability management, compliance, asset inventory, governance or operational security data domains.
• Experience implementing monitoring and alerting for cloud services, data pipelines, integrations and automation workflows.

Skills and Attributes for Success

• We are looking for individuals with practical experience across security engineering, cloud engineering, data engineering, analytics and enterprise automation in large-scale global environments.

The successful candidate will have:

• Strong understanding of data engineering principles, including ETL/ELT, data modelling, transformation, lifecycle management, master data management, data warehousing, data lakes and enterprise data architecture.
• Experience designing scalable, resilient and secure cloud-native data ingestion, integration, automation, analytics and reporting solutions.
• Hands-on experience with Azure Data Factory, Azure Functions, Logic Apps, Storage Accounts, Azure Key Vault, Azure Monitor, Azure App Services and related integration services.
• Strong SQL and data analysis experience across relational databases, SQL Server technologies, stored procedures, reporting frameworks and analytics platforms.
• Ability to work with structured, semi-structured and API-driven data from cloud platforms, SaaS applications, enterprise systems and security technologies.
• Proficiency in Python, PowerShell or similar scripting languages for automation, cloud operations, data transformation, monitoring and systems integration.
• Strong understanding of cloud security concepts including identity and access management, secrets management, encryption, authentication, authorization, secure API integration and governance.
• Experience developing automated workflows that improve efficiency, data quality, compliance monitoring, platform resilience and service reliability.
• Knowledge of DevOps practices including CI/CD, source control, deployment automation, environment management and release processes.
• Strong troubleshooting and root cause analysis skills across cloud platforms, databases, APIs, data pipelines, automation workflows and enterprise applications.
• Experience integrating security, compliance, vulnerability, asset and operational datasets into centralized platforms for reporting, analytics, governance and decision-making.
• Ability to collaborate across engineering, infrastructure, operations, security, architecture and business teams to deliver end-to-end technical solutions.
• Strong communication, stakeholder management and consulting skills, with the ability to translate technical concepts into business value.
• Continuous improvement mindset with a focus on automation, optimization, operational excellence and emerging cloud technologies.

To Qualify for the Role, You Must Have

• Detailed knowledge of cloud data engineering, enterprise integrations, cloud operations, security data platforms, database technologies, networking fundamentals, API-based architectures and scripting languages.
• Hands-on experience with Azure Data Factory, SQL development, ETL/ELT frameworks, data integration patterns, cloud automation and enterprise reporting solutions.
• Experience designing, supporting and troubleshooting enterprise-scale cloud data platforms, integrations and analytics solutions for operational, compliance or security use cases.
• At least 8 years of experience in Security, Data Engineering, Cloud Engineering, Enterprise Integration or related technology disciplines, including knowledge of Compliance and Vulnerability Management domains.
• 3+ years of demonstrated engineering experience in large, global and virtual enterprise environments.
• Strong understanding of cloud technologies, enterprise integrations, data architectures and security technologies used to operate secure enterprise platforms.
• Excellent time management, organizational and decision-making skills.
• Ability to document processes, procedures, architecture designs, data flows and technical solutions clearly for internal teams and customers.
• Experience working with external vendors and suppliers across technology or security services.
• Technical proficiency with APIs, automation frameworks and scripting technologies such as Python, PowerShell, Ansible or similar platforms.

Ideally, You’ll Also Have

• A Bachelor's degree in Computer Science, Engineering, Information Technology, Mathematics or a related field, or equivalent work experience.
• GSEC, CISSP or other security-related certification from ISC2, GIAC, Microsoft Azure, AWS, or equivalent technology certification programmes.
• Experience in project management, service introduction, service readiness, and technology lifecycle management.

What We Look For

• This role is ideal for someone with strong problem-solving, analytical, decision-making and communication skills.
• We are looking for individuals who work effectively with culturally diverse onshore and offshore teams, navigate ambiguity with confidence and balance security, cloud engineering, data engineering and operational priorities.
• Independent thinkers with strong technical foundations, collaborative mindsets and a commitment to automation and continuous improvement will thrive in this role.

What We Offer

As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial, and social well-being. Your recruiter can talk to you about the benefits available in your country. Here's a snapshot of what we offer:

• Continuous learning: You will develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way.
• Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs.