Cyber Architecture-OT and Engineering-Cloud Security-Senior

As a TC-CS-Cyber Architecture - OT and Engineering-Cloud Security-Senior at EY, you will play a crucial role in securing cloud-native applications and ensuring the implementation of best security practices. Your responsibilities will include: - Implementing Twistlock (Prisma Cloud) to secure cloud-native applications across containers, serverless environments, and VMs. - Integrating security scans into CI/CD pipelines to enable DevSecOps best practices. - Managing vulnerability detection, compliance checks, and runtime protection for Kubernetes and cloud workloads. - Collaborating with DevOps and cloud teams to embed security early in the development lifecycle. - Developing and enforcing policies for secure application deployment in cloud-native environments. - Designing and maintaining automated security workflows using Twistlock across multi-cloud environments (AWS, Azure, GCP). - Performing risk assessments on containerized applications and serverless functions in a cloud-native DevOps ecosystem. - Enabling real-time threat detection and incident response for containerized workloads and cloud services. - Defining and implementing best practices for vulnerability management, image scanning, and compliance reporting. - Collaborating with developers to create secure-by-design container images and Infrastructure as Code (IaC) templates. - Leading initiatives to embed security controls into Kubernetes clusters, microservices, and CI/CD pipelines. - Monitoring and optimizing Twistlock policies to adapt to evolving cloud-native application architectures. - Driving security automation initiatives to increase DevSecOps maturity and minimize manual intervention. - Identifying and addressing vulnerabilities in cloud configurations, ensuring compliance with industry standards and monitoring cloud infrastructure for security gaps. - Automating deployments and integrating security tools using Python and Terraform. Preferred Requirements: - Expertise in Twistlock (Prisma Cloud) for container and cloud-native application security. - Hands-on experience with Terraform for automating infrastructure provisioning and security. - Familiarity with CSPM tools like Wiz and CSPM for monitoring and improving cloud security posture. - Proficiency in scripting and automation using Python to streamline processes. - Strong understanding of cloud environments (AWS, Azure, GCP) and their native security services. - Knowledge of DevSecOps principles, including integrating security into CI/CD pipelines and adopting Infrastructure as Code (IaC) practices. - Ability to adapt security workflows to evolving multi-cloud and containerized application architectures. Required Qualifications: - Minimum of 5 years of IT experience. - At least 3+ years of specialization in CSPM tools. - At least 2+ years of application development in Python. - At least 2+ years of experience with programming languages such as Terraform. - Minimum 2-3 years of experience in implementing and managing Twistlock (Prisma Cloud) for container and cloud-native application security. - 3-5 years of experience in managing and securing multi-cloud environments (AWS, Azure, GCP) with native security tools. EY exists to build a better working world, helping to create long-term value for clients, people, and society and build trust in the capital markets. Supported by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform, and operate across various sectors. Working at EY, you will be part of a global organization that asks better questions to find new answers for the complex issues facing the world today.,