Join EY and contribute to building a better working world. This role focuses on enhancing cloud security by developing and maintaining hardened VM images across AWS and Azure. You will be instrumental in automating security processes and ensuring robust compliance.

We are seeking a dedicated Cyber Security Engineer with expertise in CI/CD pipelines, scripting, and cloud technologies. Your work will directly impact the security posture of our cloud environments, requiring a proactive approach to identifying and mitigating risks.

A commitment to continuous learning and staying abreast of emerging threats is essential for success in this dynamic and collaborative team environment.

Develop and maintain secure VM images through automation and scripting, including designing end-to-end automation workflows for image creation, validation, testing, and deployment. Implement CI/CD pipelines for efficient image management and integrate security validations such as vulnerability scanning and compliance checks. Perform OS hardening for various operating systems like RHEL, Ubuntu, and Windows, and build automated patching mechanisms. Apply in-depth knowledge of CIS L1/L2 frameworks for automated vulnerability remediation and track CIS benchmark updates. Support audits by providing evidence and remediation strategies, and collaborate with cross-functional teams to align hardened images with enterprise requirements. Enhance pipelines with security validation, conduct peer reviews for automation logic, and provide excellent customer service through effective client communication.

A minimum of 5 years of IT experience, with at least 3 years specializing in image hardening and 2 years in application development using Python. Demonstrated experience with Terraform and managing multi-cloud environments (AWS, Azure, GCP) using native security tools for at least 3-5 years. Proficiency in scripting languages such as PowerShell and Bash, alongside experience with Azure DevOps, Ansible, and Packer is essential. Deep understanding of CIS Benchmarks (L1/L2), OS hardening principles, and automated security remediation is required. Strong problem-solving abilities, effective communication skills, and a proactive mindset are crucial for this role.