Cloud Security-Senior

EY; Dadri, Pune District, Bengaluru; Hybrid; INR 2,000,000 - 3,500,000; Full time

Job summary

EY India seeks a seasoned Cyber Security Engineer to design, build, and maintain hardened VM images in AWS and Azure, focusing on CIS benchmarks and OS hardening. You will automate image creation, patching, and security validation within CI/CD pipelines.

Collaborating with cloud, architecture, and security teams, you will drive secure image design, implement end-to-end automation, and contribute to audits while staying current with threats and technologies.

Qualifications

• 5+ years IT experience.
• 3+ years in image hardening.
• 2+ years of Python development.
• 2+ years Terraform experience.
• 3-5 years managing multi-cloud (AWS, Azure, GCP) with native security tools.

Responsibilities

• Develop and maintain secure VM images through automation and scripting.
• Implement CI/CD pipelines for image deployment and management.
• Design end-to-end automation for image creation, validation, testing, and deployment.
• Create and maintain runbooks, hardening guides, and architecture diagrams.
• OS hardening for RHEL, Rocky, OEL, Amazon Linux, Ubuntu, Windows 2016/2019/2022.
• Patch management automation for Linux and Windows images.
• Remediate vulnerabilities using CIS L1/L2 and automated checks.
• Peer review scripts and IaC templates for quality and consistency.
• Collaborate with cloud infra, architecture, and security teams.
• Communicate progress and enhancements to clients/team stakeholders.

Skills

Python

PowerShell

Bash

CI/CD pipelines

Scripting

Azure DevOps

Ansible

Terraform

Packer

OS hardening

CIS Benchmarks

Security remediation

Tools

Terraform

Packer

Ansible

Azure DevOps

AWS

PowerShell

Bash

Job description

Job Summary:

• Cyber Security Engineer We are seeking a skilled Cyber Security Engineer to join our dynamic team responsible for the creation and maintenance of hardened VM images in AWS and Azure environments.
• The ideal candidate will have a strong background in CI/CD pipeline deployment and coding, with proficiency in scripting languages such as Python, PowerShell and Bash.
• Experience with Azure DevOps, Ansible, Terraform, and Packer is essential.
• The role requires deep knowledge of CIS Benchmarks (L1/L2), OS hardening, and automated security remediation.
• The candidate should demonstrate strong problem-solving skills, effective communication abilities, and a proactive approach to security challenges.
• A commitment to continuous learning and staying updated with emerging threats, tools, and technologies is highly valued.

Key responsibilities include:

• Developing and maintaining secure VM images through automation and scripting.
• Implementing CI/CD pipelines for efficient deployment and management of images.
• Design and implement end to end automation workflows for image creation, validation, testing, and deployment.
• Create and maintain detailed documentation (runbooks, hardening guides, architecture diagrams).
• Conducting OS hardening for various operating systems, including RHEL, Rocky, OEL, Amazon Linux, Ubuntu, and Windows (2016/2019/2022). Debugging code and troubleshooting pipeline errors, OS issues, and service deployments.
• Build and manage automated patching mechanisms for Linux and Windows images.
• Applying in-depth knowledge of CIS L1/L2 frameworks to identify and remediate vulnerabilities using automated mechanisms.
• Track updates in CIS benchmarks and ensure continuous alignment with best practices.
• Support audits and compliance reviews by providing evidence, reports, and remediation strategies.
• Enhance pipelines with security validation, including vulnerability scanning, compliance checks, and integrity verification.
• Conduct peer reviews for scripts, automation logic, and IaC templates to ensure quality and consistency.
• Collaborate with cloud infrastructure, architecture, and security teams to align hardened images with enterprise requirements.
• Providing excellent customer service by communicating effectively with clients about team initiatives and project progress.
• The successful candidate will possess strong problem-solving skills, a proactive approach to security challenges, and the ability to work collaboratively in a fast-paced environment.
• A commitment to continuous learning and staying updated on the latest security trends and technologies is highly valued.

Required:

• Minimum of 5 years of IT experience
• At least 3+ years of specialization in Image hardening.
• At least 2+ years of application development in python.
• At least 2+ Experience with programming languages such as Terraform.
• 3-5 years of experience in managing and securing multi-cloud environments (AWS, Azure, GCP) with native security tools