Consultant SecDevOps F/H FY27
Ernst and Young1 day ago
Paris, FranceSenior
Responsibilities
- Perform cybersecurity and SecDevOps maturity assessments.
- Define client-specific transformation roadmaps and SecDevOps operating models.
- Integrate automated security controls into CI/CD pipelines.
- Deploy and configure application-security solutions covering SAST, DAST, SCA, infrastructure-as-code security, secrets detection, and container security.
- Support Security Champions programs and define secure-development standards, requirements, and practices.
- Conduct code reviews and application-security analyses, and support development teams with vulnerability remediation.
- Build and monitor risk- and performance-oriented management indicators.
- Contribute to cloud-native security engagements and EY SecDevOps offerings.
Requirements
- Understand application vulnerabilities and risks associated with the software development lifecycle.
- Know Secure SDLC, Security by Design, OWASP Top 10, and major application-attack categories.
- Understand modern architectures, APIs, microservices, cloud environments, DevOps principles, and CI/CD pipelines.
- Have experience with one or more application-security tools such as GitHub Advanced Security, Snyk, Checkmarx, SonarQube, Veracode, Prisma Cloud, or Wiz.
- Be able to explain cybersecurity issues to technical and business stakeholders and facilitate workshops.
- Demonstrate an analytical, problem-solving approach and strong written and spoken English.
- The posting seeks experienced SecDevOps consultants but does not state a numeric experience requirement.
Benefits
- Flexible Smartworking@EY work environment.
- International mobility opportunities and collaboration with globally connected teams.
- Annual discretionary bonus, profit-sharing bonus, RTT days, advantageous health insurance, meal vouchers, and 75% reimbursement of public-transit subscriptions or financial assistance for bicycle purchase.
- Referral bonuses, discounted Wellpass sports membership, free admission to the Louvre and Eugène-Delacroix museums, and privileged access to the Paris Opera.
Tech Stack
SonarQube
Categories
Solutions Engineering
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.