Business Security Consultant

EY Infosec is seeking a Cloud Security consultant with expertise in cloud security architecture configuration and governance across the Microsoft Azure platform with subject matter expertise on Cloud Native Application Protection Platform (CNAPP) technology and its integration into development release and operational practices. This is a hands-on role to guide implement and maintain the security of cloud services and infrastructure. The consultant will lead the enablement of CNAPP technology and apply best practices for secure deployments to proactively identify and mitigate security risks for EYs business applications hosted in the Azure environment. The ideal candidate will also have familiarity with other cloud platforms such as GCP and AWS.

Role summary

This position is a Business security consultant to drive the full lifecycle enablment of the Wiz CNAPP platform across a large and growing portfolio of applications hosted in Azure as well as at the Azure infrastructure level. The consultant will work within a DevSecOps model and enable automated security testing and compliance vulnerability management and overall risk reduction in the environment. The ideal candidate will have to think outside the box to solve unique security issues that arise and adopt new cloud services.

The role will also provide advice to the project teams in designing developing and implementing all aspects of security for complex global applications based on Microsoft Azure technology and generally the Microsoft technology stack. The role is very much an individual contributor capable of supporting multiple project other words it is not a program management or oversight role but one that requires collaboration with product owners architects developers DevOps and other information security roles in the design implementation and certification of security controls across multiple projects/applications. This also requires knowledge of various IT system architectures and Cloud technology as well as supporting technologies such as SAST tools DAST tools Identity and Access Management (IAM) network security firewalls audit and logging and other security concepts as outlined in ISO27001 OWASP and related security standards. The consultant should have knowledge of 3rd Party security assessments and applicability of SOC1 and SOC2 reports and concepts of vendor risk management.

Key responsibilities

• SME (subject matter expert) to mature/advance our cloud security posture using the Wiz CNAPP across the Azure cloud platform. Guide and help Integrating Wiz to drive risk-based remediation with product/DevOps teams and automate guardrails that keep our environment compliant and resilient. based remediation with product/DevOps teams and automate guardrails that keep our environment compliant and resilient.
• Drive the implementation of existing and new features of Wiz and build the capabilities of CNAPP within EY.
• Develop tune and enforce security policies requirements standards and procedures for cloud environments and containerized workloads including Kubernetes clusters setup and orchestration solutions emphasizing vulnerability reduction and compliance.
• Collaborate with cross-functional teams to shift left (IaC scanning in CI/CD approve/deny policies) integrate security best practices into the software development lifecycle (SDLC) and continuous integration/continuous deployment (CI/CD) pipelines. left
• Develop and implement security automation solutions to continuously monitor cloud environments for compliance threats and performance anomalies.
• Automate ingestion of security defects and vulnerability findings to Jira/ServiceNow
• Conduct regular security assessments vulnerability scans and threat modeling for cloud environments. Identify evaluate and mitigate risks in cloud infrastructure using automated/customized methods.
• Work with cross-functional teams including security architects engineers developers and product owners to explore new ideas and develop innovative ways to automate monitor and improve security at scale across cloud platforms.
• Work with Security Ops and Incident response teams to investigate and remediate security incidents providing expertise on cloud-specific attack vectors and mitigation strategies.
• Generate dashboards and executive metrics (risk reduction SLA adherence coverage) for assigned portfolio of business products and services. Report related security risks incidents and findings to leadership and relevant stakeholders.
• Collaborate with stakeholders to define project scope deliverables and expectations ensuring alignment with business objectives.
• Identify gaps in existing security tools and services and when necessary collaborate with development teams to create custom security solutions to protect the organization.

Qualifications

• Bachelors degree in Computer science Information Security or related field
• 8years of experience working as a Cloud Security Engineer/Architect with Wiz (or similar CNAPP platforms and capabilities)
• Hands-on experience with Wiz (or similar CNAPP) capabilities at Enterprise level including CSPM CWPP Vulnerability scanning Compliance assessments DevSecOps integration
• CI/CD familiarity (GitHub/GitLab/Azure DevOps) IaC (Terraform/CloudFormation)
• Scripting/automation (Rego/Python/TypeScript) APIs/webhooks event pipelines
• Strong understanding of DevSecOps principles and practices.
• Must possess excellent communication presentation and collaboration skills.
• Relevant security certifications such as CISSP or GIAC certs or Azure Security Engineer is a plus
• Frameworks: CIS Benchmarks NIST ISO 27001/27002 SOC 2 and other industry standards
• Bonus: data classification (GDPR/CCPA) Container/Kubernetes security (EKS/AKS)