CMS-Manager-Cloud Engineer

EY; Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

EY is looking for a Cloud Security Manager in Mumbai, India. You will perform investigations for Defender for Cloud alerts, troubleshoot AWS connector issues, and drive remediation with client teams. Ideal candidates have 8+ years in Cloud security engineering and are familiar with Azure and AWS technologies.

The role involves identifying systemic misconfigurations, proposing improvements, and ensuring operational security. A mix of technical and interpersonal skills is required.

Qualifications

• 8+ years of Cloud technology experience, especially in Security engineering or Architecture.
• Experience designing SOC playbooks for cloud detection.
• Familiarity with automation and integrating events into SIEM/SOAR.

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts.
• Correlate workload detections with posture context.
• Troubleshoot AWS connector data gaps and document resolutions.
• Drive remediation execution with client teams.

Skills

Azure: RBAC, networking, key services

AWS: IAM, EC2/EKS basics

Incident handling discipline

Hands-on experience with CSPM tools

Job description

CMS- Cloud Security Manager

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts: scoping affected resources, identifying likely attack vectors, and recommending containment steps.
• Correlate workload detections with posture context to identify systemic misconfigurations driving risk.
• Troubleshoot AWS connector data gaps (permissions, connector health, plan prerequisites) and document resolution steps.
• Understand the AWS connector auth model (federated trust and short-lived credentials) to support secure onboarding and triage.
• Drive remediation execution with client teams: validate fixes, confirm risk reduction, manage exceptions (time‑bound), and tune operational noise.
• Identify recurring issues and propose new detections/playbooks, improved routing, and better enrichment.

Required

• Azure: RBAC, networking, key services (VMs, AKS, storage, databases)
• AWS: IAM, EC2/EKS basics, security logging concepts, CloudFormation familiarity (for onboarding patterns)
• Ability to explain and operate posture management: secure score, recommendations, compliance posture, and remediation workflow.
• Incident handling discipline: containment/eradication guidance, stakeholder communications, and post‑incident documentation.
• Hands‑on experience with CSPM tools (Defender/Wiz/AWS Security Hub etc).

Preferred Requirements

• Minimum 8+ years of Cloud technology, specifically in Security engineering, or Security Architecture roles.
• Experience designing/tuning SOC playbooks for cloud detection and posture workflows.
• Familiarity with automation (Logic Apps/SOAR patterns) and integrating CNAPP events into SIEM/SOAR pipelines.
• SC‑200 + AZ‑500 (preferred), AWS Security Specialty, GIAC Cloud (GCLD) or similar.