Senior AI Infrastructure Security Consultant

EY; Bengaluru; On-site; INR 350,000 - 600,000; Full time

Job summary

EY is seeking a senior AI - IT/OT Network & Infrastructure Security professional to lead design and implementation of security across enterprise, cloud, and OT environments.

You will drive AI-assisted security operations, anomaly detection, and predictive risk analytics, while coordinating with clients and teams on architecture, governance, and incident response.

Qualifications

• 4-8 years of experience across AI driven Network & Infrastructure security domain, security architecture, OT security, Zero Trust, or related fields.
• Experience with OT security tools (Nozomi, Claroty, Armis, Dragos, Cisco Cyber Vision) and OT vulnerability management.
• Hands-on with SSE/SASE platforms and secure access technologies (VPN, ZTNA, DNS security).

Responsibilities

• Design and implement network and infrastructure security strategies across enterprise, cloud, and OT environments.
• Drive adoption of Zero Trust and IEC 62443-aligned OT security controls; implement advanced segmentation.
• Manage NGFW, NAC, VPN, ZTNA, and DNS security deployments; lead incident response and resilience initiatives.
• Develop AI-assisted security operations, anomaly detection, and automated response in industrial settings.
• Collaborate with advisory teams to deliver AI network and infrastructure security solutions.

Skills

AI-driven security

Network security

OT security

Zero Trust

XDR

ZTNA

NGFW

NAC

DNS security

SASE

Cloud security

AI-assisted security

Education

Bachelor’s degree in a relevant field

Tools

Nozomi

Claroty

Armis

Dragos

Cisco Cyber Vision

Palo Alto

Fortinet

Azure Firewall

VMware

Netskope

Zscaler

CSPM

Job description

AI - IT/OT Network & Infrastructure Security Senior Role summary

We are looking for an AI - IT/OT Network & Infrastructure Security Senior professional with solution mindset and hands on security engineering expertise in network security / Infrastructure security concepts, risk and controls concepts, architecture design, transformations that sit at the intersection of enterprise platforms, cybersecurity controls, and AI tools. This role is for a Senior professional who should have practical experience in network security engineering, detection engineering, and OT cyber risk reduction, with growing exposure to AI-assisted security operations, prompt engineering, AI-driven anomaly detection, and device behavior analytics.

This role is part of the Cyber Frontier & AI capability focused on enabling scalable, AI-first cyber defense across enterprise and industrial environments.

Key responsibilities

• Understands design and implementation of network and infrastructure security strategies across enterprise, cloud, and OT environments.
• Drive adoption of Zero Trust, IEC 62443-aligned OT security controls, and advanced segmentation architectures.
• Possess knowledge about deployment and governance of NGFW, NAC, VPN, ZTNA, SASE,DNS security, CASB, and CSPM solutions.
• Incident response and security improvement initiatives to enhance cyber resilience across hybrid infrastructure.
• Possess knowledge & experience on secure remote access, DMZ architecture, PLC security, and cloud network protection.
• Good understanding on AI-assisted IT/OT security architecture and operations, enabling predictive threat monitoring and automated response within industrial environments.
• Understands AI-driven anomaly detection models to identify deviations in OT network traffic, process behaviors, and industrial protocols (e.g., Modbus, DNP3, OPC).
• Build AI-based rule optimization frameworks for IT/OT security controls, improving traffic filtering, segmentation policies, and alert accuracy.
• Leverage AI for OT network traffic optimization, enabling intelligent routing, congestion minimization, and adaptive policy enforcement.
• Implement AI-powered device behavior profiling, establishing baselines for PLCs, HMIs, and IoT/IIoT assets to detect unauthorized or abnormal activities.
• Apply AI in PLC code analysis and review, identifying logic anomalies, misconfigurations, and potential security vulnerabilities in industrial control systems.
• Utilize AI/ML for network threat detection, including intrusion detection, lateral movement analysis, and zero-day attack identification in IT/OT environments.
• Design and optimize prompt engineering strategies to effectively leverage GenAI tools for IT/OT security use cases such as incident investigation, log analysis, and threat intelligence enrichment.
• Enable AI-driven continuous monitoring and predictive risk analytics to enhance IT/OT resilience and reduce operational downtime.
• Build reusable methods, accelerators, reference architectures, and runbooks that strengthen the firms AI Network & Infrastructure Security offerings and improve repeatability across sectors and accounts.
• Manage client expectations, delivery scope, solution quality, risks, and technical escalations while coaching teams and enabling long-term client capability through documentation and knowledge transfer.

Required qualifications

• 4-8 years of experience across AI driven Network & Infrastructure security domain, Security architecture, OT security, Zero Trust Security, or related fields.
• Experience with OT security tools (Nozomi, Claroty, Armis, Dragos, Cisco Cyber Vision) and OT vulnerability management.
• Expertise in XDR, Zero Trust, and regulatory frameworks (IEC 62443, CIS). Hands-on with NGFWs (Palo Alto, Cisco, Fortinet, Azure Firewall) and VMware virtualization security.
• Skilled in SSE/SASE platforms (Netskope, Zscaler, Akamai) and secure access technologies (VPN, ZTNA, DNS security).
• Strong capability in multi-vendor security integration across IT, OT, and cloud environments.
• Strong client-facing communication and the ability to operate as a trusted technical advisor to senior stakeholders.

Ideally, youll also have

• Good soft skills i.e. verbal & written communication, technical document writing etc
• Strong project management, negotiation and interpersonal skills
• Prior experience working in Advisory or Technology Consulting industry
• Customer orientation skills
• Knowledge of Information security standards and compliances (ISO 27001, ISO 27017, NIST 800 53, CISA, CIS benchmark etc.)
• Industry related certification (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF)
• Vendor related certifications (e.g. Zscaler, Nozomi, Netskope, Palo Alto Networks, Cisco & others)