CMS-Manager-Cloud Engineer

EY; Tirupati; On-site; INR 2,800,000 - 5,200,000; Full time

Job summary

EY India seeks an experienced CMS- Cloud Security Manager to lead end-to-end cloud security investigations, enforce posture management, and drive remediation with client teams across Defender for Cloud, Azure, and AWS environments.

You will design and tune SOC playbooks for cloud detection, integrate CNAPP events into SIEM/SOAR pipelines, and mentor security engineers. Certifications preferred and hands-on CSPM required.

Qualifications

• Strong Azure and AWS operational fluency with cloud security focus.
• Experience with CSPM tooling and cloud posture management.
• Familiarity designing SOC playbooks for cloud detections and posture workflows.

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts and scope resources.
• Correlate detections with posture context to identify misconfigurations.
• Troubleshoot AWS connector data gaps and document resolution steps.
• Drive remediation with client teams and validate risk reduction.
• Develop detections and playbooks, improve routing and enrichment.

Skills

Azure Cloud

AWS Cloud

RBAC

Security posture

CSPM tools

Incident handling

SOAR automation

Education

SC-200 / AZ-500

AWS Security Specialty

GIAC Cloud (GCLD)

Tools

Defender for Cloud

Wiz

AWS Security Hub

Logic Apps

Job description

Job Description:

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

CMS- Cloud Security _Manager

Responsibilities:

• Perform end-to-end investigations for Defender for Cloud alerts: scoping affected resources, identifying likely attack vectors, and recommending containment steps.
• Correlate workload detections with posture context to identify systemic misconfigurations driving risk.
• Troubleshoot AWS connector data gaps (permissions, connector health, plan prerequisites) and document resolution steps.
• Understand the AWS connector auth model (federated trust and short-lived credentials) to support secure onboarding and triage.
• Drive remediation execution with client teams: validate fixes, confirm risk reduction, manage exceptions (time-bound), and tune operational noise.
• Identify recurring issues and propose new detections/playbooks, improved routing, and better enrichment.

Required:

Strong Azure and AWS operational fluency:

• Azure: RBAC, networking, key services (VMs, AKS, storage, databases)
• AWS: IAM, EC2/EKS basics, security logging concepts, CloudFormation familiarity (for onboarding patterns)
• Ability to explain and operate posture management: secure score, recommendations, compliance posture, and remediation workflow.
• Incident handling discipline: containment/eradication guidance, stakeholder communications, and post-incident documentation.
• Hands-on experience with CSPM tools (Defender/Wiz/AWS Security Hub etc).

Preferred Requirements:

• Minimum 8+ years of Cloud technology, specifically in Security engineering, or Security Architecture roles
• Experience designing/tuning SOC playbooks for cloud detection and posture workflows.
• Familiarity with automation (Logic Apps/SOAR patterns) and integrating CNAPP events into SIEM/SOAR pipelines.
• SC-200 + AZ-500 (preferred), AWS Security Specialty, GIAC Cloud (GCLD) or similar.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Requirements: