Join EY and contribute to building a better working world. This role focuses on AI-driven IT/OT Network and Infrastructure Security within the Cyber Frontier & AI capability, aiming to create scalable, AI-first cyber defense for enterprise and industrial environments. You'll work at the intersection of IT/OT network security, infrastructure security, and frontier AI to develop practical, scalable solutions that reduce risk and support secure business transformation.

This position is ideal for a professional with a solution-oriented mindset, possessing knowledge in network and infrastructure security, risk management, and architecture design. The role is part of a global, cross-functional team offering exposure to strategic client programs and market-shaping initiatives.

This role involves designing and implementing robust network and infrastructure security strategies across enterprise, cloud, and OT environments. You will drive the adoption of Zero Trust principles and IEC 62443-aligned OT security controls, along with advanced segmentation architectures. Key responsibilities include managing deployments of various security solutions like NGFW, NAC, VPN, ZTNA, SASE, DNS security, CASB, and CSPM.

Focus will also be placed on enhancing cyber resilience through incident response and security improvement initiatives. You will leverage AI extensively for anomaly detection in OT networks, prompt engineering for GenAI tools, and building AI-based rule optimization frameworks. Responsibilities extend to AI-powered device behavior profiling, PLC code analysis for vulnerabilities, and designing reusable methods and accelerators to strengthen EY's AI Network & Infrastructure Security offerings.

A minimum of 1-3 years of experience is required in AI-driven Network & Infrastructure Security, Security Architecture, OT Security, Zero Trust Security, or related domains. Professional understanding and knowledge of OT security tools such as Nozomi, Claroty, Armis, Dragos, and Cisco Cyber Vision, along with OT vulnerability management, are essential.

Familiarity with XDR, Zero Trust, and regulatory frameworks like IEC 62443 and CIS is necessary. Hands-on experience with NGFWs (Palo Alto, Cisco, Fortinet, Azure Firewall) and VMware virtualization security is expected. Experience with SSE/SASE platforms (Netskope, Zscaler, Akamai) and secure access technologies (VPN, ZTNA, DNS security) is also a key requirement. The ability to integrate multi-vendor security solutions across IT, OT, and cloud environments is crucial.