Senior InfoSec Consultant

About the role

The EY Global Information Security team is looking for a Senior InfoSec Consultant to lead the design, development, and implementation of security controls for market-leading regional and global systems based primarily on Cloud technologies. This role involves working closely with client engagement teams and technologists worldwide to support digitally-enabled services that leverage leading technologies like AI, Blockchain, and Cloud Security.

Responsibilities

• Design, implement, and operate security controls for cloud-based systems and solutions.
• Develop and enforce security protocols for blockchain technologies and applications.
• Collaborate with agile and DevOps teams to ensure security practices align with project timelines.
• Support the integration of security measures into multi-tier business solutions, including application-level access and entitlement management, data tenancy and isolation, encryption, and logging.
• Work with open-source web technologies and programming languages, particularly in InfoSec code review.
• Implement security measures in a Microsoft Azure environment and manage global systems using primarily PaaS and SaaS architectures, focusing on AI, Blockchain, Quantum Computing, and Metaverse subjects.
• Apply knowledge of IT system architecture and cloud technology, along with supporting technologies such as IAM, network security, firewalls, user account management, audit and logging, and security concepts outlined in ISO27001/2, OWASP, and related regional standards.

Requirements

• Significant working security experience and knowledge in the design, implementation, and operation of security controls in one or more of the following areas:
• Hands-on experience with developing and implementing AI security technologies, especially Generative AI and rapidly growing Large Language Models (LLMs).
• Experiences with designing and enforcing security protocols to safeguard blockchain technologies and applications.
• Experience with Agile & DevOps Methodologies, including balanced team roles within Agile development or DevOps environments.
• Technical understanding of virtualization, cloud infrastructure, and public cloud offerings, with experience designing security configurations and controls within cloud-based solutions in Microsoft Azure and Azure PAAS services (SQL, Service Bus, Service Fabric, Data Lake, PowerBI).
• Experience with application security, including the design of security controls for multi-tier business solutions, REST API, and microservices architecture.
• Infrastructure security experience, integrating common infrastructure security technologies and solutions into business solution architectures, including identity & access management, intrusion detection and prevention, security monitoring, and data encryption solutions.
• Working experience with Open Source web technologies and programming languages, preferably with InfoSec code review.
• Significant experience in implementing security in a Microsoft Azure environment and practical knowledge of implementing global systems using a primarily PaaS and SaaS architecture, especially in AI, Blockchain, Quantum Computing, and Metaverse subjects.
• Advanced degree in Computer Science or a related discipline; or equivalent work experience. CISSP, CCSP, CISM, or similar security certifications preferred.

Qualifications

• Significant working security experience and knowledge in the design, implementation, and operation of security controls in one or more of the following areas:
• Operational Security – Experience with defining operational models and procedures for business solutions including the operation and maintenance of infrastructure and application security controls.
• Information Security Standards – Knowledge of common information security standards such as: ISO 27001/27002, CSA and CIS Controls, etc.
• Cloud security certifications such as AZ-500 Azure Security Engineer.
• Product Management – working with a broader business team on aspects of security that affect all phases from concept to design to implementation and then operational support.

Benefits

Compensation ranges vary by location in the US and New York City Metro Area, Washington State, and California (excluding Sacramento). The base salary range for this position is $128,100 to $239,600. Additional benefits include medical and dental coverage, a pension plan, and a flexible vacation policy.

Pay

The base salary range for this position is $128,100 to $239,600.

Schedule

Most people in external, client-serving roles work together in person 40-60% of the time over the course of an engagement, project, or year.