Security Technology - Cloud Security Engineer
Ernst and Young4 days ago
Wrocław, PolandMid Level
Responsibilities
- Design, engineer, implement, test, document, and support security solutions and services across on-premises, hybrid, and cloud environments.
- Build standardized secure development and CI/CD capabilities with security tooling, quality gates, reusable templates, and secure-by-default patterns.
- Apply cloud security controls and architectural judgment across Azure, AWS, and GCP, including CNAPP, CSPM, CWPP, and KSPM capabilities.
- Integrate and operationalize SAST, SCA/OSS scanning, secrets scanning, DAST, container image scanning, and related software supply-chain security controls.
- Provide technical oversight, consulting, level-four operational support, and continuous improvement for Information Security technologies.
- Lead or technically oversee projects and initiatives, coordinating activities through successful completion without direct supervision responsibilities.
- Drive automation, innovation, standards compliance, service readiness, and maintenance of new and existing security solutions.
- Collaborate with Security Architecture, Service Delivery, Security Operations, Cyber Defense, Service Owners, and global technology teams.
- Train and mentor staff in technical processes and best practices and communicate technology issues to senior business and technology leaders.
- Work outside regular office hours, including occasional weekend or late-night work, during project and early lifecycle support phases.
Requirements
- 4+ years of experience in security, DevOps/platform engineering, or software delivery with a strong security focus.
- Hands-on experience designing or operating DevSecOps and secure CI/CD pipelines with integrated security controls and gate checks.
- Practical experience with application and software supply-chain security capabilities such as SAST, SCA/OSS scanning, secrets scanning, DAST, and container image scanning.
- Hands-on experience with cloud security across one or more of Azure, AWS, and GCP; Azure experience is strongly preferred.
- Experience with CNAPP, CSPM, CWPP, or KSPM capabilities, ideally including Wiz, and using findings to drive remediation and secure-by-default patterns.
- Proficiency in scripting and automation with PowerShell, Bash, Python, or similar languages.
- Experience with Infrastructure as Code and automation using Terraform, Bicep, or equivalent tools.
- Proven experience working in teams and managing projects or initiatives, including change control management processes.
- Extensive experience in large, global, and virtual environments, with strong written and verbal English skills.
- Ability and desire to train and mentor staff in technical processes and best practices.
- Preferred experience building reusable secure pipeline templates or golden paths for multiple teams.
- Preferred experience operationalizing AI tooling for security engineering workflows or using AI/LLM capabilities securely in enterprise contexts.
- Preferred hands-on experience with containers and Kubernetes security, policy-as-code, cloud guardrails, workflow orchestration, observability, hybrid cloud connectivity, and service introduction processes.
- Relevant cloud administration, engineering, or security certifications are preferred, including Azure, AWS, GCP, GSEC, or CISSP.
Benefits
- Hybrid work arrangement in Wrocław or Katowice with 2 days in the office and 3 days remote.
- Occasional weekend or late-night work may be required during projects and early lifecycle support phases.
- Continuous learning, coaching, skills development, and career growth within EY Global Delivery Services.
- Global collaboration across EY teams, service lines, geographies, and sectors.
- Diverse and inclusive work culture with tools and flexibility to make a meaningful impact.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.