CMS-Manager-Cloud Engineer

EY; Coimbatore District; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

EY is looking for a CMS- Cloud Security Manager in Coimbatore District, Tamil Nadu, to oversee cloud security investigations and remediation efforts. The ideal candidate will have over 8 years of experience in Security engineering roles and be skilled with Azure and AWS services.

This role includes performing investigations on Defender for Cloud alerts, troubleshooting issues, and collaborating with client teams to reduce risks. Familiarity with cloud security tools and SOC playbook design is preferred as well.

Qualifications

• 8+ years of Cloud technology experience, ideally in Security engineering or Security Architecture.
• Experience designing/tuning SOC playbooks for cloud detection.
• Familiarity with automation and integrating CNAPP events.

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts.
• Correlate workload detections with posture context.
• Troubleshoot AWS connector data gaps.
• Drive remediation execution with client teams.
• Identify recurring issues and propose new detections.

Skills

Azure: RBAC, networking, key services

AWS: IAM, EC2/EKS basics

Incident handling discipline

Hands-on experience with CSPM tools

Job description

CMS- Cloud Security Manager

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts: scoping affected resources, identifying likely attack vectors, and recommending containment steps.
• Correlate workload detections with posture context to identify systemic misconfigurations driving risk.
• Troubleshoot AWS connector data gaps (permissions, connector health, plan prerequisites) and document resolution steps.
• Understand the AWS connector auth model (federated trust and short-lived credentials) to support secure onboarding and triage.
• Drive remediation execution with client teams: validate fixes, confirm risk reduction, manage exceptions (time‑bound), and tune operational noise.
• Identify recurring issues and propose new detections/playbooks, improved routing, and better enrichment.

Required

• Azure: RBAC, networking, key services (VMs, AKS, storage, databases)
• AWS: IAM, EC2/EKS basics, security logging concepts, CloudFormation familiarity (for onboarding patterns)
• Ability to explain and operate posture management: secure score, recommendations, compliance posture, and remediation workflow.
• Incident handling discipline: containment/eradication guidance, stakeholder communications, and post‑incident documentation.
• Hands‑on experience with CSPM tools (Defender/Wiz/AWS Security Hub etc).

Preferred Requirements

• Minimum 8+ years of Cloud technology, specifically in Security engineering, or Security Architecture roles.
• Experience designing/tuning SOC playbooks for cloud detection and posture workflows.
• Familiarity with automation (Logic Apps/SOAR patterns) and integrating CNAPP events into SIEM/SOAR pipelines.
• SC‑200 + AZ‑500 (preferred), AWS Security Specialty, GIAC Cloud (GCLD) or similar.