CMS- Cloud Security Manager

EY - Ernst & Young

CMS- Cloud Security _Manager

Responsibilities

• Perform end-to-end investigations for Defender for Cloud alerts: scoping affected resources, identifying likely attack vectors, and recommending containment steps.
• Correlate workload detections with posture context to identify systemic misconfigurations driving risk.
• Troubleshoot AWS connector data gaps (permissions, connector health, plan prerequisites) and document resolution steps.
• Understand the AWS connector auth model (federated trust and short-lived credentials) to support secure onboarding and triage.
• Drive remediation execution with client teams: validate fixes, confirm risk reduction, manage exceptions (time-bound), and tune operational noise.
• Identify recurring issues and propose new detections/playbooks, improved routing, and better enrichment.

Required:

Strong Azure and AWS operational fluency:

• Azure: RBAC, networking, key services (VMs, AKS, storage, databases)
• AWS: IAM, EC2/EKS basics, security logging concepts, CloudFormation familiarity (for onboarding patterns)
• Ability to explain and operate posture management: secure score, recommendations, compliance posture, and remediation workflow.
• Incident handling discipline: containment/eradication guidance, stakeholder communications, and post-incident documentation.
• Hands-on experience with CSPM tools (Defender/Wiz/AWS Security Hub etc).

Preferred Requirements:

• Minimum 8+ years of Cloud technology, specifically in Security engineering, or Security Architecture roles

• Experience designing/tuning SOC playbooks for cloud detection and posture workflows.

• Familiarity with automation (Logic Apps/SOAR patterns) and integrating CNAPP events into SIEM/SOAR pipelines.

• SC-200 + AZ-500 (preferred), AWS Security Specialty, GIAC Cloud (GCLD) or similar.

• EY | Building a better working world

• EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

• Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

• Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.