Join EY to build a career that is as unique as you are. Leverage global scale, supportive culture, and advanced technology to become your best self. Your distinct voice and perspective are crucial in helping EY achieve even greater success. Together, we can create an exceptional personal experience and contribute to a better working world for everyone.

EY is dedicated to building a better working world by creating long-term value for clients, people, and society. We foster trust in capital markets and help clients grow, transform, and operate effectively through data and technology-driven insights across more than 150 countries. Our diverse teams excel in assurance, consulting, law, strategy, tax, and transactions, posing challenging questions to uncover innovative solutions for today's complex global issues.

Manage the complete lifecycle of vulnerability management for containerized environments, including containers, images, registries, Kubernetes clusters, and related cloud-native infrastructure. Track and report on remediation progress, vulnerability aging, SLA adherence, exceptions, and accepted risks. Utilize container security tools like AquaSec and Wiz for assessing, monitoring, and facilitating the remediation of container-related vulnerabilities. Act as the Subject Matter Expert in Container Security, offering technical guidance and advisory support for vulnerability remediation within containerized settings. Identify opportunities for automation to enhance the efficiency, consistency, and effectiveness of container security operations. Analyze vulnerability data to generate metrics that provide actionable intelligence and visibility into exposures across container environments. Collaborate closely with application, DevSecOps, cloud, and platform engineering teams to drive the remediation of vulnerabilities in container images and runtime environments. Correlate vulnerability data with asset ownership, image lineage, deployment context, internet exposure, and business criticality to facilitate risk-based prioritization. Support executive and operational reporting on container security posture, remediation trends, high-risk vulnerabilities, and outstanding risk items. Contribute to process documentation, playbooks, metrics, dashboards, and continuous improvement initiatives for container vulnerability management.

This Supervising Associate role focuses on Container Security and supports EY's Vulnerability Management initiatives. The position requires comprehensive practical knowledge of container and Kubernetes security, including hands-on expertise with Aqua Security (AquaSec). Familiarity with Wiz and Kubernetes-as-a-Service (KaaS) environments is also essential.

The candidate will serve as a primary technical resource for Container Vulnerability Management. This involves close partnership with Operations, Engineering, KaaS DevOps, application teams, and other stakeholders to effectively identify, analyze, triage, communicate, track, and support the remediation of security vulnerabilities impacting containerized environments.

The role integrates technical expertise, robust vulnerability management practices, effective stakeholder coordination, insightful metrics and reporting, strategic risk-based prioritization, and a commitment to continuous service improvement.