CNAPP Cloud Security Lead - Azure & DevSecOps

EY; Salt Lake City (UT); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY Infosec is seeking a Cloud Security consultant to guide and implement CNAPP-based security across Azure, with familiarity across GCP and AWS. This hands-on role focuses on secure deployments, vulnerability management, and automated security testing within a DevSecOps model.

The ideal candidate will lead the enablement of Wiz CNAPP, integrate guardrails, and collaborate with product and DevOps teams to reduce risk across EY’s cloud portfolio.

Qualifications

• BA/BS in CS or InfoSec or related field.
• 10+ years as Cloud Security Engineer/Architect with CNAPP platforms.
• Hands‑on Wiz CNAPP capabilities at enterprise level.
• CI/CD familiarity and IaC (Terraform/CloudFormation).
• Scripting and automation with Rego/Python/TypeScript.
• Strong DevSecOps principles and collaboration skills.

Responsibilities

• mature cloud security posture using Wiz CNAPP on Azure.
• drive automation of guardrails for compliance and resilience.
• implement and extend CNAPP features within EY.
• develop and enforce security policies for cloud and Kubernetes.
• integrate security into SDLC and CI/CD pipelines.
• build security automation to monitor cloud environments.
• conduct security assessments, vulnerability scans, and threat modeling.
• produce dashboards and executive risk metrics for leadership.

Skills

DevSecOps

Cloud security architecture

Security governance

IaC scanning

Scripting

CI/CD integration

Education

Bachelor's degree in Computer Science or Information Security

Tools

Wiz CNAPP

Terraform

CloudFormation

Kubernetes

GitHub/GitLab/Azure DevOps

Rego/Python/TypeScript

Job description

EY Infosec is seeking a Cloud Security consultant to guide and implement CNAPP-based security across Azure, with familiarity across GCP and AWS. This hands-on role focuses on secure deployments, vulnerability management, and automated security testing within a DevSecOps model.

The ideal candidate will lead the enablement of Wiz CNAPP, integrate guardrails, and collaborate with product and DevOps teams to reduce risk across EY’s cloud portfolio.