TC-CS-Cyber Architecture- OT and Engineering-Devops- Cloud Security-Senior

EY; Kolkata District; On-site; INR 2,000,000 - 2,800,000; Full time

Job summary

EY is seeking a Cyber Security Engineer in India to create and maintain hardened VM images in AWS and Azure, with a focus on CI/CD deployment and automation. You will script in Python, PowerShell and Bash, and leverage Azure DevOps, Ansible, Terraform and Packer to enforce CIS benchmarks and OS hardening.

You will design end-to-end automation, automate patching, and contribute to secure, auditable image lifecycles across Linux and Windows environments.

Qualifications

• Strong background in CI/CD pipeline deployment and coding.
• Proficiency in scripting languages such as Python, PowerShell and Bash.
• Experience with Azure DevOps, Ansible, Terraform, and Packer is essential.
• Deep knowledge of CIS Benchmarks (L1/L2), OS hardening, and automated security remediation.
• Proactive approach to security challenges and continuous learning.

Responsibilities

• Develop and maintain secure VM images through automation and scripting.
• Implement CI/CD pipelines for deployment and management of images.
• Design and automate end-to-end workflows for image creation, validation, testing, and deployment.
• Create and maintain runbooks, hardening guides, and architecture diagrams.
• Perform OS hardening across RHEL, Rocky, OEL, Amazon Linux, Ubuntu, and Windows Server.
• Build and manage automated patching for Linux and Windows images.
• Apply CIS L1/L2 to identify and remediate vulnerabilities with automation.
• Track CIS benchmark updates and align with best practices.
• Support audits with evidence, reports, and remediation strategies.
• Enhance pipelines with security validation, vulnerability scanning, and integrity checks.

Skills

CI/CD

Python

PowerShell

Bash

Automation

Security

Problem solving

Communication

Tools

Azure DevOps

Ansible

Terraform

Packer

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Job Summary

• Cyber Security Engineer We are seeking a skilled Cyber Security Engineer to join our dynamic team responsible for the creation and maintenance of hardened VM images in AWS and Azure environments.
• The ideal candidate will have a strong background in CI/CD pipeline deployment and coding, with proficiency in scripting languages such as Python, PowerShell and Bash.
• Experience with Azure DevOps, Ansible, Terraform, and Packer is essential.
• The role requires deep knowledge of CIS Benchmarks (L1/L2), OS hardening, and automated security remediation.
• The candidate should demonstrate strong problem-solving skills, effective communication abilities, and a proactive approach to security challenges.
• A commitment to continuous learning and staying updated with emerging threats, tools, and technologies is highly valued.

Key responsibilities include

• Developing and maintaining secure VM images through automation and scripting.
• Implementing CI/CD pipelines for efficient deployment and management of images.
• Design and implement end to end automation workflows for image creation, validation, testing, and deployment.
• Create and maintain detailed documentation (runbooks, hardening guides, architecture diagrams).
• Conducting OS hardening for various operating systems, including RHEL, Rocky, OEL, Amazon Linux, Ubuntu, and Windows (2016/2019/2022). Debugging code and troubleshooting pipeline errors, OS issues, and service deployments.
• Build and manage automated patching mechanisms for Linux and Windows images.
• Applying in-depth knowledge of CIS L1/L2 frameworks to identify and remediate vulnerabilities using automated mechanisms.
• Track updates in CIS benchmarks and ensure continuous alignment with best practices.
• Support audits and compliance reviews by providing evidence, reports, and remediation strategies.
• Enhance pipelines with security validation, including vulnerability scanning, compliance checks, and integrity verification.