Security Engineer

Role overview

Security Engineer at EY

The role focuses on cloud security engineering, vulnerability and exposure management, security integrations, monitoring, and automation.

Required qualifications

• Skills and Attributes for Success - Strong hands-on knowledge of Microsoft Azure security and Azure-native monitoring services. - Practical experience with vulnerability management, exposure assessment, and remediation workflows. - Understanding of SIEM integrations, APIs, log pipelines, and KQL. - Automation mindset with Python and/or PowerShell. - Good understanding of cloud security and security posture management. - Clear English communication and ability to work with global technical teams. - Knowledge of Zscaler and/or Wiz To Qualify for the Role, You Must Have - 9+ years of experience in security engineering, cloud security, vulnerability management, or a related technical role. - Hands-on Microsoft Azure experience, including RBAC, Log Analytics, Event Hubs, and Microsoft Sentinel. - Experience with vulnerability scanning, asset inventory, risk-based prioritization, and remediation tracking. - Experience integrating security platforms with SIEM/SOAR or cloud security services. - Python and/or PowerShell scripting skills. - Working knowledge of multi-cloud security; Azure is the primary platform.

Employment details

• Location: Bengaluru [KA] [IN] [560048]

About the employer

• At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you.
• STS Lab Security Engineer The Opportunity The EY Security Technology Services (STS) Lab builds, tests, and improves security solutions used across EY.
• Your Key Responsibilities - Engineer and improve security capabilities in Microsoft Azure, including RBAC, Log Analytics, Event Hubs, and Microsoft Sentinel. - Manage vulnerability and exposure processes, including scanning, asset coverage, prioritization, reporting, and remediation integration. - Support Zscaler, Wiz, Qualys, or similar security tools when required. - Build integrations between security tools and SIEM/SOAR platforms using APIs, connectors, and event pipelines. - Develop and maintain log ingestion, KQL detections, dashboards, and operational monitoring. - Automate repeatable engineering tasks using Python, PowerShell, GitHub Actions, or Azure DevOps. - Test new security capabilities and product changes in the STS Lab before production deployment. - Create clear technical documentation, standards, and operational runbooks.
• EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
• Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Additional role details

• And we’re counting on your unique voice and perspective to help EY become even better, too.
• Join us and build an exceptional experience for yourself, and a better working world for all.
• We are looking for a hands-on Security Engineer with strong Microsoft Azure and vulnerability management skills.
• Zscaler, Wiz, and Qualys are important technologies within the environment, but the role is not primarily a network security or network operations position.
• Ideally, You Will Also Have - Experience with Qualys or another enterprise vulnerability management platform. - Working knowledge of Zscaler, Wiz, or similar platforms. - Microsoft certifications such as AZ-104, AZ-500, SC-200, or SC-100. - Security or cloud certifications such as CISSP, CCSP, GIAC, or equivalent. - Experience with GitHub Actions or Azure DevOps pipelines.
• What We Look For - A practical engineer who takes ownership and delivers reliable solutions. - Someone who can turn security requirements into working configurations, integrations, and monitoring. - A collaborative, proactive, and well-organized person who documents their work clearly.
• What We Offer - Continuous learning, technical training, and certification support. - Opportunities to grow in cloud security, vulnerability management, engineering, or architecture. - A collaborative and inclusive global work environment. - Competitive compensation and flexible working arrangements.
• Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.