Cloud Security Engineer

About the role

EY's Security Technology Services Engineering team is looking for a Cloud Security Engineer to help design and deliver organization-wide secure development capabilities, including standardized CI/CD patterns that embed security tooling and quality gates. The role covers cloud security engineering across Azure, AWS and GCP, including CNAPP platforms such as Wiz, and supports the selective use of AI to strengthen security workflows.

Key responsibilities

• Design, engineer, implement and support early life-cycle security solutions in EY's multi-cloud environments, acting as subject matter expert on cloud security use cases.
• Work with Security Architects, Service Delivery, Security Operations and Cyber Defense, and advise other teams, acting as a level-four contact for operational issues.
• Provide technical oversight of Information Security technologies, keeping them within agreed service levels and at peak performance.
• Lead projects and manage the work of others, delivering security solutions to completion with production support and documentation.
• Drive automation and innovation, improving existing solutions with partners such as Security Architecture, Service Owners and Security Operations.
• Communicate technology issues to senior business and technology leaders.

Required profile

• 4+ years of experience in security, DevOps/platform engineering or software delivery with a strong security focus.
• Proven track record of teamwork and project management, and ability to mentor staff.
• Extensive experience in large, global and virtual environments; strong written and spoken English.
• Flexibility to work outside regular office hours, including weekends or late nights during project and early-life-cycle support phases.

Required skills

• DevSecOps and secure CI/CD pipelines (GitHub Actions, Azure DevOps Pipelines or equivalent).
• Application and software supply-chain security: SAST, SCA/OSS scanning, secrets scanning, DAST, container image scanning.
• Cloud security on Azure, AWS and GCP (Azure experience strongly preferred).
• CNAPP/CSPM/CWPP/KSPM tools, ideally Wiz.
• Scripting and automation with PowerShell, Bash or Python.
• Infrastructure as Code (Terraform, Bicep or equivalent) and change control management.
• Nice to have: Kubernetes security, policy-as-code (Azure Policy, OPA/Gatekeeper), workflow orchestration, observability platforms, hybrid cloud connectivity, and security certifications such as GSEC, CISSP or AWS/Azure/GCP.