Join EY's Security Technology Services (STS) Lab as a Monitoring & AI Protection Engineer, a pivotal role in shaping EY's global cybersecurity platform. This position offers the opportunity to be the hands-on technical owner of our third-party security tooling ecosystem, ensuring its seamless integration and continuous improvement within our broader security architecture. You will directly influence how EY's security posture is monitored, assessed, and protected across multi-cloud environments, collaborating with leading security architects and subject matter experts. This role is ideal for a senior engineer eager to make a significant impact in a dynamic, global organization dedicated to building a better working world.

As a key member of the STS Lab team, you will own the end-to-end engineering, configuration, and lifecycle management of critical security platforms including Zscaler, Qualys, Wiz, and CSPM tooling. You will design and implement integrations between these third-party tools and EY's core security stack, such as Microsoft Sentinel and Defender XDR, to ensure unified visibility and alerting. Your responsibilities will extend to engineering Cloud Security Posture Management capabilities, defining policy frameworks, and managing vulnerability scanning and reporting pipelines. Additionally, you will build and maintain monitoring and alerting pipelines, develop automation scripts using Python or PowerShell, and conduct lab environment testing for new tooling before production deployment. Producing clear documentation and runbooks for global distribution is also a core function.

This role requires a seasoned professional with over five years of experience in Security Engineering or Cloud Security, specifically with demonstrable hands-on ownership of third-party security tooling. You should possess at least three years of direct experience with two or more of the following: Zscaler, Qualys, Wiz, or CSPM platforms in an enterprise setting. Proven ability to design and implement integrations between security platforms and SIEM/SOAR or cloud-native security stacks is essential. Technical proficiency with Microsoft Azure, including Log Analytics Workspaces and Microsoft Sentinel, along with scripting skills in Python and/or PowerShell for automation, is required. A working knowledge of multi-cloud environments, particularly Azure, AWS, and GCP from a security posture perspective, is also necessary.