CMS-Manager-Cloud Engineer

EY; Pune District; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

EY in Pune District, India, is looking for a Cloud Security Manager to perform investigations on alerts, drive remediation efforts, and manage client interactions.

The ideal candidate should have over 8 years of experience in cloud technology, specifically in security roles, and possess relevant certifications like SC-200 and AZ-500. This role involves understanding AWS and Azure environments and working with CSPM tools.

Qualifications

• Experience in Security engineering or Security Architecture roles.
• Ability to explain and operate posture management strategies.
• Familiarity with automation and integrating events into SIEM/SOAR pipelines.

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts.
• Correlate workload detections with posture context.
• Troubleshoot AWS connector data gaps and document resolution steps.
• Drive remediation execution with client teams.

Skills

Azure: RBAC, networking, key services

AWS: IAM, EC2/EKS basics

Incident handling discipline

Hands-on experience with CSPM tools

Education

8+ years of Cloud technology experience

SC-200 + AZ-500 certification (preferred)

Job description

CMS- Cloud Security Manager

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts: scoping affected resources, identifying likely attack vectors, and recommending containment steps.
• Correlate workload detections with posture context to identify systemic misconfigurations driving risk.
• Troubleshoot AWS connector data gaps (permissions, connector health, plan prerequisites) and document resolution steps.
• Understand the AWS connector auth model (federated trust and short-lived credentials) to support secure onboarding and triage.
• Drive remediation execution with client teams: validate fixes, confirm risk reduction, manage exceptions (time‑bound), and tune operational noise.
• Identify recurring issues and propose new detections/playbooks, improved routing, and better enrichment.

Required

• Azure: RBAC, networking, key services (VMs, AKS, storage, databases)
• AWS: IAM, EC2/EKS basics, security logging concepts, CloudFormation familiarity (for onboarding patterns)
• Ability to explain and operate posture management: secure score, recommendations, compliance posture, and remediation workflow.
• Incident handling discipline: containment/eradication guidance, stakeholder communications, and post‑incident documentation.
• Hands‑on experience with CSPM tools (Defender/Wiz/AWS Security Hub etc).

Preferred Requirements

• Minimum 8+ years of Cloud technology, specifically in Security engineering, or Security Architecture roles.
• Experience designing/tuning SOC playbooks for cloud detection and posture workflows.
• Familiarity with automation (Logic Apps/SOAR patterns) and integrating CNAPP events into SIEM/SOAR pipelines.
• SC‑200 + AZ‑500 (preferred), AWS Security Specialty, GIAC Cloud (GCLD) or similar.