EY is seeking a skilled Cyber Security Engineer to join our dynamic team, focusing on creating and maintaining hardened VM images across AWS and Azure.

This role demands expertise in CI/CD pipelines, coding, and scripting languages like Python, PowerShell, and Bash. A strong foundation in Azure DevOps, Ansible, Terraform, and Packer is crucial. The ideal candidate possesses deep knowledge of CIS Benchmarks (L1/L2), OS hardening, and automated security remediation, coupled with excellent problem-solving and communication skills.

We value proactive security engagement and a commitment to continuous learning about emerging threats and technologies. Join us in building a better working world and advancing your career in a globally connected, diverse environment.

Key responsibilities include automating and scripting the development and maintenance of secure VM images, and implementing CI/CD pipelines for efficient deployment. You will design and implement end-to-end automation workflows for image creation, validation, testing, and deployment.

Responsibilities extend to OS hardening for various operating systems (RHEL, Rocky, OEL, Amazon Linux, Ubuntu, Windows) and building automated patching mechanisms. You'll apply in-depth knowledge of CIS L1/L2 frameworks for automated vulnerability remediation and track CIS benchmark updates.

Supporting audits with evidence, enhancing pipelines with security validation (scanning, compliance checks), conducting peer reviews for code and templates, and collaborating with cross-functional teams are also vital. Effectively communicating project progress and team initiatives to clients is expected.

A minimum of 5 years of IT experience is required, with at least 3 years specifically in image hardening.

We require a minimum of 2 years of application development in Python and at least 2 years of experience with programming languages like Terraform.

Candidates should also have 3-5 years of experience managing and securing multi-cloud environments (AWS, Azure, GCP) using native security tools. Strong problem-solving abilities, a proactive security mindset, and collaborative skills are essential for success in this fast-paced role.