Consultant SecDevOps F/H
Ernst and Young1 day ago
Paris, FranceMid Level
Responsibilities
- Conduct application security and SecDevOps maturity assessments.
- Define client-specific transformation roadmaps and SecDevOps operating models.
- Integrate automated security controls into CI/CD pipelines.
- Deploy and configure SAST, DAST, SCA, IaC Security, secrets detection, and container security solutions.
- Support Security Champions programs and define secure development standards and requirements.
- Perform code reviews and application security analyses.
- Support development teams in remediating vulnerabilities.
- Build and monitor risk- and performance-oriented management indicators.
- Contribute to cloud-native security engagements and EY SecDevOps offerings.
Requirements
- At least 3 years of experience in a similar role.
- Understanding of application vulnerabilities and software development lifecycle risks.
- Knowledge of Secure SDLC and Security by Design principles.
- Knowledge of the OWASP Top 10 and major application attack families.
- Understanding of modern architectures, APIs, microservices, and cloud environments.
- Knowledge of DevOps principles and CI/CD pipelines.
- Experience with one or more application security tools such as GitHub Advanced Security, Snyk, Checkmarx, SonarQube, Veracode, Prisma Cloud, or Wiz.
- Fluent written and spoken English.
- Ability to explain cybersecurity issues to technical and business audiences.
- Analytical, problem-solving approach and comfort facilitating workshops and supporting teams.
Benefits
- Specialized cybersecurity training and certification pathways.
- Flexible Smartworking work environment.
- International mobility opportunities and collaboration with globally connected teams.
- Annual discretionary bonus, profit-sharing bonus, RTT leave, advantageous health insurance, meal vouchers, and 75% public-transport reimbursement or financial assistance for bicycle purchase.
- Referral bonuses, discounted Wellpass sports membership, and free entry to the Louvre and Eugène-Delacroix museums.
- Recruitment generally includes four interviews, conducted remotely and in person, and may include a technical test.
Tech Stack
SonarQube
Categories
Solutions Engineering
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.