Cloud Security Engineer - EY Global Delivery Services
Ernst and Young2 months ago
Buenos Aires, ArgentinaMid Level
Responsibilities
- Design, engineer, implement, test, document, and provide early life-cycle and production support for security systems and services across multi-cloud, hybrid, on-premises, and cloud environments.
- Develop organization-wide secure development capabilities, including standardized CI/CD patterns, security tooling, quality gates, reusable templates, and secure-by-default developer workflows.
- Serve as the Information Security subject matter expert for cloud security technologies and provide technical consulting and level-four operational support.
- Lead or participate in complex projects, manage project activities, provide technical oversight, and drive successful delivery and service introduction.
- Improve and maintain security solutions, standards, automation, and operational performance in partnership with Security Architecture, Service Delivery, Security Operations, and Cyber Defense.
- Apply cloud security controls, CNAPP capabilities, policy guardrails, supply-chain protections, container security, and infrastructure automation across Azure, AWS, and GCP.
- Represent the team to technical and senior business stakeholders, articulate technology risks, and mentor staff in technical processes and best practices.
- Work flexibly with global teams, including occasional out-of-hours, weekend, or late-night support during projects and early life-cycle phases.
Requirements
- At least 4 years of experience in security, DevOps/platform engineering, or software delivery with a strong security focus.
- Hands-on experience designing or operating DevSecOps and secure CI/CD pipelines with security controls and gate checks, such as GitHub Actions or Azure DevOps Pipelines.
- Practical experience with SAST, SCA/OSS scanning, secrets scanning, DAST, container image scanning, and software supply-chain security capabilities.
- Hands-on cloud security experience with one or more of Azure, AWS, and GCP; Azure experience is strongly preferred.
- Experience with CNAPP, CSPM, CWPP, or KSPM capabilities, ideally including Wiz, and using findings to drive remediation and secure-by-default patterns.
- Proficiency in PowerShell, Bash, Python, or similar scripting and automation languages.
- Experience with Infrastructure as Code and automation, such as Terraform or Bicep.
- Experience working on teams, managing projects and initiatives, change control processes, and large global virtual environments.
- Ability and desire to train and mentor staff, communicate effectively in English, and collaborate across culturally diverse teams.
- Preferred experience with reusable pipeline templates, secure AI or LLM adoption, Kubernetes and container security, policy-as-code, workflow orchestration, observability platforms, hybrid-cloud connectivity, and service readiness.
- Preferred certifications include Azure, AWS, GCP, GSEC, CISSP, or equivalent ISC2 or GIAC credentials.
Benefits
- Continuous learning, coaching, career development tools, and opportunities for leadership growth.
- Flexible working arrangements designed to support work-life balance; client-facing work may involve regular travel or client-site assignments.
- Benefits supporting physical, emotional, financial, and social well-being, subject to availability in the employee’s country.
- Inclusive and diverse global work environment.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.