Business Security Consultant (CNAPP)

About the role

EY Infosec is seeking a Cloud Security consultant with expertise in cloud security architecture, configuration, and governance across the Microsoft Azure platform with subject matter expertise on Cloud Native Application Protection Platform (CNAPP) technology and its integration into development, release, and operational practices.

Responsibilities

• SME to mature/advance our cloud security posture using the Wiz CNAPP across the Azure cloud platform. Guide and help Integrating Wiz to drive risk-based remediation with product/DevOps teams and automate guardrails that keep our environment compliant and resilient.
• Drive the implementation of existing and new features of Wiz and build the capabilities of CNAPP within EY.
• Develop, tune, and enforce security policies, requirements, standards, and procedures for cloud environments and containerized workloads, including Kubernetes clusters setup, and orchestration solutions, emphasizing vulnerability reduction and compliance.
• Collaborate with cross-functional teams to shift left (IaC scanning in CI/CD, approve/deny policies), integrate security best practices into the software development lifecycle (SDLC) and continuous integration/continuous deployment (CI/CD) pipelines.
• Develop and implement security automation solutions to continuously monitor cloud environments for compliance, threats, and performance anomalies.
• Automate ingestion of security defects and vulnerability findings to Jira/ServiceNow.
• Conduct regular security assessments, vulnerability scans, and threat modeling for cloud environments. Identify, evaluate, and mitigate risks in cloud infrastructure using automated/customized methods.
• Work with cross-functional teams, including security architects, engineers, developers and product owners to explore new ideas and develop innovative ways to automate, monitor, and improve security at scale across cloud platforms.
• Work with Security Ops and Incident response teams to investigate and remediate security incidents, providing expertise on cloud-specific attack vectors and mitigation strategies.
• Generate dashboards and executive metrics (risk reduction, SLA adherence, coverage) for assigned portfolio of business products and services. Report related security risks, incidents, and findings to leadership and relevant stakeholders.
• Collaborate with stakeholders to define project scope, deliverables, and expectations, ensuring alignment with business objectives.
• Identify gaps in existing security tools and services, and, when necessary, collaborate with development teams to create custom security solutions to protect the organization.

Requirements

• Bachelor’s degree in Computer science, Information Security, or related field
• 8+ years of experience working as a Cloud Security Engineer/Architect with Wiz (or similar CNAPP platforms and capabilities)
• Hands-on experience with Wiz (or similar CNAPP) capabilities at Enterprise level including – CSPM, CWPP, Vulnerability scanning, Compliance assessments, DevSecOps integration
• CI/CD familiarity (GitHub/GitLab/Azure DevOps), IaC (Terraform/CloudFormation)
• Scripting/automation (Rego/Python/TypeScript), APIs/webhooks, event pipelines
• Strong understanding of DevSecOps principles and practices.

Qualifications

• Relevant security certifications such as CISSP or GIAC certs or Azure Security Engineer is a plus
• Frameworks: CIS Benchmarks, NIST 800‑53, 800‑190, ISO 27001/27002, SOC 2 and other industry standards
• Bonus: data classification (GDPR/CCPA), Container/Kubernetes security (EKS/AKS)

Benefits

The role offers a comprehensive compensation and benefits package including medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

Pay

The base salary range for this job in all geographic locations in the US is $128,100 to $239,600. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $153,800 to $272,300. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.

Schedule

Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.

Equal Opportunity Employer

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.