CMS-Manager-Cloud Engineer

EY; Hyderabad; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

EY is seeking a CMS- Cloud Security Manager in Hyderabad, India. You will perform end-to-end investigations for Defender for Cloud alerts, correlate workload detections, and drive remediation execution with client teams.

The ideal candidate must have a minimum of 8 years of experience in Cloud technology, primarily in Security engineering roles, and hands-on experience with CSPM tools. A background in automation and incident handling is preferred.

Qualifications

• Minimum 8+ years of Cloud technology, specifically in Security engineering, or Security Architecture roles.
• Ability to explain and operate posture management: secure score, recommendations, compliance posture.
• Familiarity with automation (Logic Apps/SOAR patterns).

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts.
• Correlate workload detections with posture context.
• Drive remediation execution with client teams.

Skills

Azure: RBAC, networking, key services (VMs, AKS, storage, databases)

AWS: IAM, EC2/EKS basics, security logging concepts

Incident handling discipline

Hands-on experience with CSPM tools (Defender/Wiz/AWS Security Hub)

Job description

CMS- Cloud Security Manager

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts: scoping affected resources, identifying likely attack vectors, and recommending containment steps.
• Correlate workload detections with posture context to identify systemic misconfigurations driving risk.
• Troubleshoot AWS connector data gaps (permissions, connector health, plan prerequisites) and document resolution steps.
• Understand the AWS connector auth model (federated trust and short-lived credentials) to support secure onboarding and triage.
• Drive remediation execution with client teams: validate fixes, confirm risk reduction, manage exceptions (time‑bound), and tune operational noise.
• Identify recurring issues and propose new detections/playbooks, improved routing, and better enrichment.

Required

• Azure: RBAC, networking, key services (VMs, AKS, storage, databases)
• AWS: IAM, EC2/EKS basics, security logging concepts, CloudFormation familiarity (for onboarding patterns)
• Ability to explain and operate posture management: secure score, recommendations, compliance posture, and remediation workflow.
• Incident handling discipline: containment/eradication guidance, stakeholder communications, and post‑incident documentation.
• Hands‑on experience with CSPM tools (Defender/Wiz/AWS Security Hub etc).

Preferred Requirements

• Minimum 8+ years of Cloud technology, specifically in Security engineering, or Security Architecture roles.
• Experience designing/tuning SOC playbooks for cloud detection and posture workflows.
• Familiarity with automation (Logic Apps/SOAR patterns) and integrating CNAPP events into SIEM/SOAR pipelines.
• SC‑200 + AZ‑500 (preferred), AWS Security Specialty, GIAC Cloud (GCLD) or similar.