At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
STS Lab Security Engineer
The Opportunity
The EY Security Technology Services (STS) Lab builds, tests, and improves security solutions used across EY. We are looking for a hands-on Security Engineer with strong Microsoft Azure and vulnerability management skills. The role focuses on cloud security engineering, vulnerability and exposure management, security integrations, monitoring, and automation. Zscaler, Wiz, and Qualys are important technologies within the environment, but the role is not primarily a network security or network operations position.
Your Key Responsibilities
- Engineer and improve security capabilities in Microsoft Azure, including RBAC, Log Analytics, Event Hubs, and Microsoft Sentinel.
- Manage vulnerability and exposure processes, including scanning, asset coverage, prioritization, reporting, and remediation integration.
- Support Zscaler, Wiz, Qualys, or similar security tools when required.
- Build integrations between security tools and SIEM/SOAR platforms using APIs, connectors, and event pipelines.
- Develop and maintain log ingestion, KQL detections, dashboards, and operational monitoring.
- Automate repeatable engineering tasks using Python, PowerShell, GitHub Actions, or Azure DevOps.
- Test new security capabilities and product changes in the STS Lab before production deployment.
- Create clear technical documentation, standards, and operational runbooks.
Skills and Attributes for Success
- Strong hands-on knowledge of Microsoft Azure security and Azure-native monitoring services.
- Practical experience with vulnerability management, exposure assessment, and remediation workflows.
- Understanding of SIEM integrations, APIs, log pipelines, and KQL.
- Automation mindset with Python and/or PowerShell.
- Good understanding of cloud security and security posture management.
- Clear English communication and ability to work with global technical teams.
- Knowledge of Zscaler and/or Wiz
To Qualify for the Role, You Must Have
- 9+ years of experience in security engineering, cloud security, vulnerability management, or a related technical role.
- Hands-on Microsoft Azure experience, including RBAC, Log Analytics, Event Hubs, and Microsoft Sentinel.
- Experience with vulnerability scanning, asset inventory, risk-based prioritization, and remediation tracking.
- Experience integrating security platforms with SIEM/SOAR or cloud security services.
- Python and/or PowerShell scripting skills.
- Working knowledge of multi-cloud security; Azure is the primary platform.
Ideally, You Will Also Have
- Experience with Qualys or another enterprise vulnerability management platform.
- Working knowledge of Zscaler, Wiz, or similar platforms.
- Microsoft certifications such as AZ-104, AZ-500, SC-200, or SC-100.
- Security or cloud certifications such as CISSP, CCSP, GIAC, or equivalent.
- Experience with GitHub Actions or Azure DevOps pipelines.
What We Look For
- A practical engineer who takes ownership and delivers reliable solutions.
- Someone who can turn security requirements into working configurations, integrations, and monitoring.
- A collaborative, proactive, and well-organized person who documents their work clearly.
What We Offer
- Continuous learning, technical training, and certification support.
- Opportunities to grow in cloud security, vulnerability management, engineering, or architecture.
- A collaborative and inclusive global work environment.
- Competitive compensation and flexible working arrangements.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.